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Abstract 


Multiple  Model  Adaptive  Estimation  with  Filter  Spawning  is  used  to  detect  and  estimate  par¬ 
tial  actuator  failures  on  the  VISTA  F-16.  The  truth  model  is  a  full  six-degree-of-freedom  simulation 
provided  by  Calspan  and  General  Dynamics,  including  the  aircraft’s  nonlinear  equations  of  motion, 
fourth  order  actuator  models,  the  complete  Block  40  flight  control  system,  and  the  aileron-to-rudder 
interconnect.  The  design  models  are  chosen  as  13-state  linearized  models,  including  first  order  ac¬ 
tuator  models.  Actuator  failures  are  incorporated  into  the  truth  model  and  design  model  assuming 
a  “failure  to  free  stream” .  Filter  Spawning  is  used  to  include  additional  filters  with  partial  actua¬ 
tor  failure  hypotheses  into  the  Multiple  Model  Adaptive  Estimation  (MMAE)  bank.  The  spawned 
filters  are  based  on  varying  degrees  of  partial  failures  (in  terms  of  effectiveness)  associated  with  the 
complete-actuator-failure  hypothesis  with  the  highest  conditional  probability  of  correctness  at  the 
current  time.  Thus,  a  blended  estimate  of  the  failure  effectiveness  is  found  using  the  filters’  esti¬ 
mates  based  upon  a  no-failure  hypothesis  (or,  an  eiffectiveness  of  100%),  a  complete  actuator  failure 
hypothesis  (or,  an  effectiveness  of  0%),  and  the  spawned  filters’  partial-failure  hypotheses.  This 
yields  substantial  precision  in  effectiveness  estimation,  compared  to  what  is  possible  without  spawn¬ 
ing  additional  filters,  making  partial  failure  adaptation  a  viable  methodology  in  a  manner  heretofore 
unachieved.  The  failure  effectiveness  estimate  is  refined  based  on  the  empirical  relationship  between 
the  effectiveness  estimate  and  the  true  effectiveness.  The  refined  estimate  is  found  to  yield  accu¬ 
rate  results  two  seconds  after  failure  detection  in  most  effectiveness  regions.  The  refined  estimate 
is  suitable  for  use  in  applying  control  via  modified  Control  Redistribution  to  handle  complete  and 
partial  actuator  failures,  and  in  considering  dual  failures. 


Multiple  Model  Adaptive  Estimation  Using  Filter  Spawning 


Chapter  1  -  Introduction 

1.1  Chapter  Overview 

This  thesis  presents  Multiple  Model  Adaptive  Estimation  with  Control  Redistribution  and  Fil¬ 
ter  Spawning  applied  to  the  detection  and  estimation  of  partial  actuator  failures  on  the  Variable- 
Stability  In-flight  Simulator  Test  Aircraft  (VISTA)  F-16.  Section  1.2  motivates  the  work  of  this 
thesis.  Then  Section  1.3  describes  the  problem  definition,  and  Section  1.4  summarizes  the  assump¬ 
tions  made.  Finally,  Section  1.5  outlines  the  thesis  format. 

1.2  Motivation 

The  United  States  Air  Force  recognizes  the  need  for  fault-tolerant  and  survivable  flight  control  . 
systems  in  its  aircraft.  In  particular,  flight  control  systems  should  be  able  to  detect  and  estimate 
actuator  and  sensor  failures,  and  reconfigure  the  control  law  of  the  aircraft  to  obtain  the  least 
degradation  in  performance  as  possible.  The  success  of  an  algorithm  that  can  detect  and  estimate 
failures  may  eliminate  the  need  for  layers  of  redundant  sensors  and  actuators,  reducing  aircraft 
weight  and  cost .  The  success  of  an  algorithm  that  can  control  an  aircraft  in  the  face  of  failures  may 
improve  performance  during  sensor  failures  (by  using  a  ‘‘better”  reconstructed  measurement  vector 
estimate,  rather  than  using  the  raw  measurements  themselves,  in  forming  the  control)  and  reduce 
the  hazard  associated  with  actuator  failures  (either  the  loss  of  the  aircraft  or  the  loss  of  mission- 
essential  aircraft  performance). 

Multiple  Model  Adaptive  Estimation  with  Control  Redistribution  (MMAE/ CR)  has  been  cho¬ 
sen  based  on  its  detection,  estimation,  and  control  performance  for  complete  actuator  and  sensor 
failures  [18,41,42].  In  considering  partial  actuator  failures,  filter  spawning  has  been  chosen  to 
include  additional  filters  in  the  MMAE  bank  based  on  partial  actuator  failure  hypotheses  at  the  rec- 


ommendation  of  Clark  [8],  based  on  the  inadequate  performance  found  using  an  MMAE  bank  based 
only  on  complete-failure  and  no-failure  hypotheses  (i.e.,  without  spawning). 

1.3  Problem  Statement 

A  long  line  of  research  [8,10,11,18,31,32,41,42]  has  explored  the  detection  and  estimation 
of  actuator  and  sensor  failures  on  the  VISTA  F-16.  Adequate  performance  has  been  achieved  for 
complete  sensor  failures,  complete  actuator  failures,  and  any  dual  combination  thereof  [18,41,42]. 
Dual  failures  have  been  considered  for  the  case  in  which  one  of  the  failures  is  a  partial  actuator 
failure;  however,  the  performance  demonstrated  did  not  warrant  its  implementation.  This  research 
seeks  to  detect  and  estimate  partial  actuator  failures  through  an  alternate  conceptualization,  called 
Filter  Spawning.  Dual  failures  and  control  aspects  will  not  be  explored  explicitly  in  this  research; 
rather,  these  aspects  are  left  for  future  consideration.  In  summary,  the  detection  and  estimation  of 
partial  actuator  failures  will  be  considered  using  MMAE  with  Filter  Spawning. 

1.4  Assumptions 

The  “real  world”  is  the  VISTA  F-16.  The  “truth  model”  is  a  full  six-degree-of-freedom  simu¬ 
lation  provided  by  Calspan  and  General  Dynamics.  It  is  assumed  that  the  “truth  model”  is  a  very 
accurate  representation  of  the  “real  world” . 

Actuator  failures  are  modelled  as  a  “failure  to  free  stream”  in  the  “truth  model”  as  well  as  in 
the  “design  model”  used  for  the  basis  of  the  filter  algorithm.  It  is  assumed  that  “failure  to  free 
stream”  actuator  failures  occur  in  the  real  world,  and  that  actuator  failures  that  change  the  plant 
matrix  (such  as  battle  damage)  or  other  actuator  failures  can  be  approximated  with  such  a  model. 

1 . 5  Thesis  Format 

This  thesis  has  a  six-chapter  format.  Chapter  1,  this  chapter,  provides  an  introduction  to 
the  thesis  topic  and  format.  Chapter  2  presents  the  history  of  MMAE,  the  theory  of  MMAE,  and 
modifications  to  MMAE  that  enhance  performance  and  on-line  implementation.  Chapter  2  presents 
these  topics  in  a  general  environment;  that  is,  most  of  the  history,  theory,  and  modifications  for 
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implementation  are  not  dependant  on  this  specific  application.  Chapter  3  first  presents  the  “real 
world” ,  the  “truth  model” ,  the  “design  model” ,  and  the  “failure  models”  incorporated  into  this 
research.  With  the  models  at  hand,  Control  Redistribution  is  explained  as  it  is  applied  to  this 
research  at  the  end  of  Chapter  3.  Chapter  4  presents  MMAE  with  Filter  Spawning  in  general  and 
as  it  is  applied  to  this  research.  Chapter  5  presents  the  performance  results  of  MMAE  with  Filter 
Spawning  applied  to  the  detection  and  estimation  of  partial  actuator  failures.  Chapter  6  reviews 
the  problem,  the  methodology,  and  the  results.  Appendix  A  is  a  supplement  to  the  description 
of  the  design  model  discussed  in  Chapter  3.  Appendices  B  and  C  are  supplements  to  the  results 
presented  in  Chapter  5. 

1.6  Chapter  Summary 

This  chapter  has  provided  an  introduction  to  the  detection  and  estimation  of  partial  actuator 
failures  using  MMAE  with  Filter  Spawning.  The  motivation,  problem  definition,  assumptions,  and 
thesis  format  have  been  discussed  to  establish  the  context  of  the  research  that  has  been  conducted. 
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Chapter  2  -  Concept  and  Algorithm  Development 


2. 1  Chapter  Overview 

This  chapter  provides  a  basic  overview  of  Multiple  Model  Adaptive  Estimation  (MMAE) .  It 
starts  with  the  historical  background  of  MMAE,  including  early  concept  development  and  contribu¬ 
tions  from  the  Air  Force  Institute  of  Technology.  The  remaining  two  sections  present  the  theory  of 
MMAE  and  modifications  to  MMAE  for  practical  implementation.  Presented  this  way,  it  should  be 
clear  what  ideas  have  theoretical  merit  and  what  ideas  have  been  found  through  research  to  enhance 
implementation . 

2.2  Multiple  Model  Adaptive  Estimation  History 

2.2.1  Early  Contributions 

2.2. 1.1  Theory.  In  1965,  Magill  [21]  first  presented  the  idea  now  known  as  Multiple  Model 
Adaptive  Estimation  (MMAE).  To  form  the  basis  of  MMAE,  Magill  proposed  to  construct  elemental 
filters,  each  based  on  a  different  hypothesis  about  the  real  world  system’s  parameter  values  or  other 
attributes.  Then,  using  the  conditional  probability  of  each  hypothesis  being  correct  (conditioned 
on  the  measurements  actually  observed)  as  a  weighting,  the  algorithm  forms  a  blended  estimate.  In 
1976,  Lainiotis  [17]  first  presented  the  idea  now  known  as  Multiple  Model  Adaptive  Control  (MMAC). 
Lainiotis  cascaded  elemental  controllers  with  the  elemental  filters  to  produce  analogously  an  “optimal 
adaptive  controller”.  At  the  time,  MMAE  and  MMAC  algorithms  were  mostly  theoretical  exercises 
for  two  reasons.  First,  implementation  was  computationally  infeasible  without  parallel  processors. 
Second,  the  recursive  nature  of  the  probability  calculations  would  eventually  cause  some  of  the 
computed  probabilities  to  go  to  zero;  thus,  the  system  would  become  insensitive  to  change. 

Chang  and  Athans  [7]  contributed  optimality  conditions  for  MMAE.  They  proved  that  the 
Bayesian  (blended)  method  was  only  optimal  provided  the  true  parameter  value  exactly  matched  one 
of  the  hypothesized  parameter  values.  Further,  it  was  shown  that  if  the  true  parameter  value  did 
not  match  the  modelled  parameter  value,  the  MMAE  was  suboptimal.  Tugnait  [46]  showed  that. 


for  Markov-1  parameter  processes^,  the  algorithm  is  again  suboptimal.  Although  the  necessary 
conditions  for  optimality  are  not  met  in  most  cases,  including  this  research  effort,  this  is  not  overly 
restrictive.  Every  designer  must  admit  that  a  finite  system  model  fails  to  represent  the  real  world 
fully.  Thus,  whether  an  algorithm  can  claim  optimality  or  not  with  respect  to  a  (perhaps  very 
artificial)  set  of  mathematical  modeling  assumptions,  it  must  be  tested  against  a  real  world  truth 
model  to  determine  true  performance. 

2.2.1. 2  Implementation.  In  1977,  Athans  et  al  [1]  developed  a  practical  implementation 
for  the  MMAE  algorithm.  This  application  presented  a  flight  control  problem  in  which  the  flight 
condition  was  estimated.  Athans  et  al  introduced  methods  to  enhance  implementation  and  also 
encountered  problems  with  MMAE. 

Two  methods  were  used  to  enhance  implementation  of  MMAE.  First,  a  lower  bound  on  the 
probability  calculations  was  introduced,  discussed  in  Section  2.4.1.  This  decreased  response  times 
(i.e.,  the  estimation  algorithm  was  more  agile)  and  avoided  the  problem  of  probabilities  going  to 
zero.  This  was  a  very  useful  alternative  to  a  full-scale  Markov  model  for  parameter  dynamics,  which 
could  accomplish  the  same  benefits,  but  with  significantly  greater  on-line  computational  expense 
and  considerably  more  complicated  effort  required  of  the  designer.  Second,  a  weighted  average  (or 
Bayesian  method)  was  used  to  calculate  the  control  signal  for  the  MM  AC  rather  than  using  the 
one  control  signal  corresponding  to  the  Alter  with  the  highest  probability  (using  the  Maximum  A 
Posteriori,  or  MAP,  method).  These  two  approaches  will  be  discussed  in  Section  2. 3. 2. 3. 

Two  problems  were  found  with  MMAE.  First,  “beta  dominance”  impaired  flight  condition 
estimation,  as  discussed  in  Section  2.4.2.  Second,  a  dither  signal,  or  test  input,  was  needed  to  excite 
the  system  and  thereby  improve  system  identification,  as  discussed  in  Section  2.4.4. 

Although  this  application  formed  the  basis  for  implementing  MMAE  and  MM  AC,  it  suffered 
two  limitations.  First,  the  aircraft  chosen^  was  inherently  stable;  therefore,  the  success  of  adaptive 

^Markov-1  processes  are  time- varying  processes  for  which  knowledge  of  the  system  states  at  the  current  time 
step  is  sufficient  to  completely  characterize  the  system  states  at  the  next  time  step. 

^The  aircraft  was  an  F-8  “Crusader”  fighter  jet. 
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control  was  not  particularly  noteworthy^.  Second,  available  digital  flight  computer  limitations  could 
not  allow  a  full  implementation.  The  algorithm  only  used  four  of  the  16  designed  filters  at  a 
relatively  slow  8  Hz  sample  rate  (as  compared  to  the  64  Hz  sample  rate  of  current  research). 

2.2.2  Contributions  at  the  Air  Force  Institute  of  Technology 

The  Air  Force  Institute  of  Technology  (AFIT)  is  a  major  contributor  in  the  MMAE  field. 
AFIT  has  applied  MMAE  algorithms  to  various  problems,  including  detection  of  failed  sensors 
and/or  actuators  [8, 10, 11, 18,31,32,41,42],  adaptive  target  tracking  [30],  adaptive  control  of  flexible 
space  vehicles  [14,26],  detection  and  compensation  of  interference/jamming  and  spoofing  of  GPS- 
aided  inertial  navigation  systems  [48],  adaptive  head  motion  predictors  in  virtual  environment  flight 
simulators  [29] ,  and  adaptive  control  of  robot  arms  [45] . 

AFIT  has  also  researched  areas  in  beta  dominance,  moving-bank  filters,  and  discretization 
methods.  Recall  that  Athans  et  al  encountered  beta  dominance  problems  in  their  flight  control 
algorithm  implementation  (See  Section  2. 2. 1.2).  In  1985,  Maybeck  and  Suizu  [29]  addressed  the 
adverse  effect  of  the  beta  term  (See  Equations  (2.21)  and  (2.22)  for  a  full  discussion  of  the  “beta” 
term).  For  their  application,  removing  the  f3  term,  i.e.,  equating  it  to  unity,  remarkably  improved 
results.  This  was  also  shown  to  be  particularly  beneficial  in  the  application  of  MMAE  and  MMAC 
to  the  detection  of  sensor  and  actuator  failures  in  flight  control  systems  by  Stevens  [28,43].  Stevens 
in  1989  and  Menke  [31,32]  in  1993  investigated  “scalar  residual  monitoring”  as  an  alternate  solution 
to  the  beta  dominance  problem  as  well.  Beta  dominance  will  be  discussed  in  full  as  it  applies  to  this 
research  in  Section  2.4.2.  In  1987,  Maybeck  and  Hentz  [25]  considered  reducing  the  total  number 
of  on-line  filters  in  a  multiple  model  algorithm  by  means  of  a  moving  bank  of  filters.  The  moving- 
bank  algorithm  logic  is  written  in  such  a  way  that  the  parameter  values  of  the  filters’  hypotheses 
seem  to  move  throughout  the  parameter  space.  AFIT  has  furthered  moving-bank  application 
and  theory  [47] .  A  particular  form  of  moving-bank  algorithm,  known  as  the  hierarchical  structure 
algorithm  [8,10,11,18,28,31,32,43]  is  especially  pertinent  to  failure  detection  in  flight  control  systems; 

^To  be  fair,  that  was  not  the  fault  of  the  authors  -  their  research  was  applied  to  an  IEEE-declared  benchmark 
problem  to  which  design  teams  were  requested  to  apply  adaptive  controllers. 


6 


it  will  be  described  more  fully  in  Section  2.3.4.  AFIT  has  also  investigated  proper  discretization  of 
parameter  spaces  [25,39,40]  as  well  as  the  proper  discretization  of  moving-bank  algorithms  [47], 

2.2.S  AFIT^s  History  in  Applying  MMAE  to  Flight  Control 

The  U.S.  Air  Force  has  always  recognized  the  need  for  fault  detection  and  estimation  in  its  flight 
control  systems.  Thus,  AFIT  has  pursued  an  MMAE  application  to  failure  detection  and  estimation 
of  sensors  and  actuators  on  current  fighter  aircraft.  Through  the  years,  the  implementation  has 
been  applied  to  the  STOL  F-15,  unmanned  aerospace  vehicles,  and  the  VISTA  F-16.  Research  has 
developed  from  initial  modelling  to  single  full  failures  to  dual  full  failures,  to  single  and  dual  partial 
failures.  Presented  here  are  the  most  recent  contributors,  namely  Menke,  Eide,  Stepaniak,  Lewis, 
and  Clark. 

In  1992,  Menke  [31,32]  performed  analysis  of  the  Variable  Stability,  In-flight  Simulator  Test 
Aircraft  (VISTA)  F-16  in  a  low  dynamic  pressure  flight  condition  (0.4  Mach,  20,000  feet)  using 
a  Dryden  wind  model  developed  by  Pogoda  [24,37].  The  low  dynamic  pressure  condition  was 
chosen  because  it  is  the  most  challenging  for  failure  detection.  Menke  considered  various  types  of 
sensor  failures,  including  loss  of  signal,  increased  noise  levels,  and  biases.  He  established  the  need 
for  a  sinusoidal  dither  signal  in  the  absence  of  pilot  command,  used  the  hierarchical  structure  for 
dual  failure  detection,  and  used  scalar  residual  monitoring  to  reduce  beta  dominance  effects  and  to 
enhance  performance  above  that  with  MMAE  alone  by  detecting  dither  sinusoids  in  the  residuals  of 
elemental  filters  based  on  incorrect  failure  hypotheses. 

In  1994,  Eide  [10, 11]  implemented  the  six  degree-of-freedom  Simulation  Rapid-prototyping 
Facility  (SRF)  simulation  for  the  VISTA  F-16.  The  SRF  VISTA  simulation  includes  complete 
nonlinear  lateral/directional  and  longitudinal  dynamics,  rather  than  the  linearized  models  of  earlier 
efforts.  The  F-16’s  entire  Block  40  flight  control  system,  including  the  aileron-rudder  interconnect, 
is  encoded  as  the  controller,  in  order  to  provide  a  very  realistic  simulation.  All  actuator  saturations 
and  rate  limits  are  also  included  in  the  simulation.  This  SRF  implementation  became  the  standard 
truth  model  throughout  the  ensuing  research. 
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In  1995,  Stepaniak  [41,42]  contributed  an  alternative  to  MM  AC  and  a  refinement  of  MMAE- 
based  control,  called  Control  Redistribution  (CR),  and  refined  an  appropriate  dither  signal.  He 
successfully  demonstrated  MMAE’s  ability  to  detect  and  compensate  for  single,  complete  failures  of 
any  actuator  or  sensor. 

Up  to  this  point,  ability  to  detect  multiple  failures  suffered  due  to  impaired  dither  signals  if 
the  first  failure  was  an  actuator.  In  1996,  Lewis  [18]  contributed  an  appropriate  redistributed  dither 
once  an  actuator  failed.  He  successfully  demonstrated  MMAE’s  ability  to  detect  dual,  complete 
failures  of  all  actuator  and  sensor  combinations. 

In  1997,  Clark  [8]  contributed  a  blending  approach  to  detecting  partial  failures.  Clark  blended 
complete  failure  and  no  failure  results  to  obtain  an  estimate  for  use  in  the  case  of  a  partial  failure. 
In  most  cases,  the  first  partial  failure  was  detected  with  some  adequacy,  but  performance  was  not 
sufficient  to  warrant  actual  implementation.  The  current  research  seeks  enhanced  detection  through 
an  alternate  conceptualization,  in  order  to  yield  a  practical  system  worthy  of  flight  test. 

2.3  MMAE  in  Theory 

Kalman  filters  estimate  states  of  a  dynamic  system,  assuming  a  particular  parameter  vector 
value  for  the  system  (See  Section  2.3.1).  In  the  current  application,  this  parameter  vector  value 
corresponds  to  the  failure  status  of  all  sensors  and  actuators,  but  other  applications  can  have  very 
different  possible  parameters.  One  could  build  many  of  these  filters,  each  assuming  a  different 
parameter  vector  value  for  the  system  model  within  a  parameter  space.  Then,  each  Kalman  fil¬ 
ter  would  provide  a  different  estimate  of  the  system  states  based  on  the  different  system  models. 
Using  the  information  provided  by  such  a  scheme.  Multiple  Model  Adaptive  Estimation  (MMAE) 
determines  a  conditional  probability  associated  with  each  filter  (and  its  corresponding  estimate), 
conditioned  on  the  measurements  actually  observed  from  the  real-world  system.  MMAE  can  then 
provide  a  state  estimate  over  a  range  of  parameter  vector  values  within  the  parameter  space.  The 
conditional  probabilities  can  be  used  to  obtain  a  parameter  vector  estimate  as  well.  Section  2.3.2 
will  discuss  this  in  more  detail. 
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Control  authority  could  be  determined  by  augmenting  controllers  to  each  Kalman  filter  within 
the  MMAE  structure  (yielding  a  Multiple  Model  Adaptive  Controller,  or  MMAC)  or  by  augmenting 
one  controller  outside  the  MMAE  loop  (yielding  what  is  called  MMAE-based  control) .  Both  are 
discussed  in  Section  2.3.3. 

To  take  MMAE  one  step  further,  one  could  assemble  multiple  MMAE  algorithms,  or  banks, 
based  on  various  families  of  parameter  vector  values.  Using  only  one  of  these  banks  at  a  time, 
logic  could  incorporate  information  obtained  from  the  current  bank  to  determine  which  bank  (and 
which  family  of  parameter  vector  values)  the  algorithm  should  use  next.  This  is  the  basis  for  the 
hierarchical  structure,  discussed  in  Section  2.3.4. 


2.3.1  Kalman  Filters 

The  Kalman  filter  is  an  optimal  estimator  of  state  variables,  based  upon  a  particular  parameter 
vector  value  to  describe  the  system  model.  The  advantage  of  this  estimator  is  that  the  estimate  uses 
information  about  the  model  of  the  system  as  well  as  measurements  of  the  system.  The  Kalman 
filter  completes  this  in  two  stages.  First,  the  filter  computes  a  'prediction  of  the  system  states  based 
on  the  imperfect  dynamics  model  it  was  given.  This  is  called  the  propagate  stage.  Second,  the 
filter  refines  the  system  state  estimates  through  the  use  of  noise  corrupted  measurements.  This  is 
called  the  update  stage.  A  complete  derivation  can  be  found  in  Stochastic  Models,  Estimation,  and 
Control  Volume  1  [22];  only  the  resulting  equations  will  be  summarized  here  [41,42]. 

The  dynamics  model  is  assumed  to  be  a  linear  time-invariant,  discrete-time  system  of  the  form 


x(ti+i) 

=  3>x(ii)  +  Bdu{ti)  +  GdWd(ti) 

(2.1) 

z(ti) 

=  Hx(ti)  +  v(tf) 

(2.2) 

where  x  is  the  vector  of  system  states,  u  the  control  input  vector,  z  the  measurement  vector,  and 
where  dynamics  driving  noise,  Wd{ti),  and  measurement  corruption  noise,  v(ti),  are  discrete-time, 


white  Gaussian  noises  with  the  statistics: 

E  [w<i(ti)]  =  0  E  [wd(ti)wj {ti)]  =  Qd 
E  [v(ti)j  =  0  E  [v(ti)v'^(iCi)]  =  R 


E  [wd(ti)v^(ti)]  =  0 


(2.3) 
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The  filter  is  propagated  forward  by 

x(i»”+i)  =  3>x(tt)  +  Bdu(ti)  (2.4) 

=  4.P(t+)4>^  +  GdQdGj  (2.5) 

starting  from  the  initial  conditions,  x(to)  P(to).  The  filter  is  updated  by 

A{ti)  =  HP(tr)H^  +  R  (2.6) 

K(tO  =  P(t,-)H^A-i(ti)  (2.7) 

T{ti)  =  Zi-lix{tr)  (2.8) 

x(in  =  x(t,“ )  +  K(ti)r(ti)  (2.9) 

P(t+)  =  P(tr)  -  K(ti)HP(tr)  (2.10) 


where  the  —  and  +  superscripts  indicate  before  and  after  the  measurement  is  taken,  respectively'*'. 
The  residual  vector,  r(ti),  can  be  shown  to  be  zero-mean,  with  the  filter-predicted  covariance  of  the 
residual  vector  described  by  Afc(ti),  as  computed  in  Equation  (2.6),  if  the  filter  is  based  upon  the 
correct  hypothesized  model. 

It  is  important  to  emphasize  what  information  a  Kalman  filter  provides.  It  provides  an  estimate 
of  the  system  states,  x(t^),  the  filter-computed  error  covariance  of  the  system  state  estimate, 
the  residual  vector,  r(ii),  and  the  filter-computed  covariance  of  the  residual  vector,  A(ti).  This 
information  is  useful  when  forming  a  Multiple  Model  Adaptive  Estimation  algorithm,  discussed  next. 

2.3.2  Multiple  Model  Adaptive  Estimation 

Recall  that  a  Kalman  filter  is  based  on  one  particular  model  of  the  system.  Further,  the 
residual  vector,  r{ti)  =  Zi  ~  Hx(t^),  is  a  measure  of  how  well  the  modelled  system  matches  the  real 
world  measurements.  In  MMAE,  a  bank,  or  set,  of  Kalman  filters  is  built,  each  with  a  different 
hypothesis  of  the  system  model.  If  all  the  filters  are  given  the  same  measurement  vector  but  are 
based  on  diflFerent  system  models,  residual  monitoring  can  be  used  to  determine  which  filter’s  system 
model  best  matches  the  true  system  model. 


^Sorae  authors  represent  as  and  as  ti\ti. 
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2. 3. 2,1  A  Bank  of  Kalman  Filters.  To  do  this,  suppose  the  bank  contains  K  filters, 
where  each  of  the  K  filters’  system  model  is  based  on  a  different  realization  of  the  parameter  vector 
a.  For  instance,  the  filter  would  be  based  on  the  system  model  with  the  characteristics  of  a^. 
Then,  each  of  the  K  filters  is  propagated  and  updated  by 


=  )  +  Bdfcu(ti) 

(2.11) 

=  +  GJdfcQrffcGj;. 

(2.12) 

Afc(fi) 

=  HkPk{t;)B.l +  Kk 

(2.13) 

(2.14) 

Vk{U) 

=  Zi-HkXkitJ) 

(2.15) 

—  Xk{ti  )  +  Kk{ti)rk{ti) 

(2.16) 

^k{tt) 

=  Pk{ti)-Kk{ti)HkPkiti-) 

(2.17) 

starting  from  the  initial  conditions,  x(to)  and  P(to))  where  the  following  notation  is  introduced: 


3>fc 

-  3>(afc) 

Bdfc 

=  Bd  (afc) 

Gdk 

=  Gd(afc) 

^dk 

=  Qd  (a*) 

Hfc 

=  H(afc) 

=  B  (afc) 

The  residuals  are  evaluated  by  the  conditional  hypothesis  probability  values.  The  conditional 
hypothesis  probability  of  the  k^^  filter  at  time  U  is  the  probability  at  time  U  that  the  random  variable 
representing  the  possible  system  characteristics,  a,  is  the  realization  of  the  variable  a  hypothesized 
by  the  k^^  elemental  filter,  a^,  given  the  time  history  of  the  measurements  up  to  and  including  that 


taken  at  time  ti,  Z{ti) 


This  is  expressed  as 


Pk{ti)  =  Prob{a  =  ak\Z{ti)  =  Zi) 


(2.18) 
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It  has  been  shown  [21,23]  that  probabilities  can  be  computed  as 

(t)  —  )  (Zt  |afc ,  Zj- 1  )pj^{ti-i) 

Note  the  denominator  acts  as  a  scaling  factor  to  ensure  that  the  probability  is  properly  defined  in 
the  sense  that 

K 

Pk{U)  ^  0  for  all  k  and  ^^Pk{U)  =  f  (2.20) 

The  conditional  density  function  in  Equation  (2.19)  is  recognized  as  the  density  function  for  the 
current  measurement  based  on  the  assumed  parameter  value  and  the  observed  time  history  of  all 
previous  measurements,  and  can  be  expressed  as: 


where 

1 

(27r)^|A,(ti)|^ 

Careful  inspection  reveals  that  Ekjuation  (2.21)  is  actually  the  density  function  for  the  Kalman 
filter’s  residuals,  which  are  white  and  Gaussian  with  zero  mean  and  covariance  Ak  if  the  assumed 
parameter  value,  a^;,  is  correct.  For  convenience,  define  the  quadratic  term  in  Equation  (2.21)  to 
be  the  likelihood  quotient, 

Lk{ti)  =  rk(ti)'^Ak~\ti)rk(ti)  (2.23) 

To  illustrate  this,  assume  that  the  k^^  filter’s  hypothesis  best  matches  the  true  parameter 
value.  Its  residuals  will  have  a  mean  squared  value  most  in  consonance  with  the  corresponding 
filter-predicted  covariance,  and  therefore  the  likelihood  quotient  will  approach  m  (the  dimension 
of  the  measurement  vector,  z(ti),  and  the  residual  vector,  rfc(ti)).  Compare  this  to  the  likelihood 
quotient  for  the  mismatched  filters.  As  the  measurements  deviate  farther  from  the  filter-predicted 
values,  both  the  residual  vector  and  the  likelihood  quotient  increase  in  magnitude.  Referring  back  to 
Eiquation  (2.21),  when  multiplied  by  the  negative  scalar  coefficient,  the  argument  of  the  exponential 
term  becomes  increasingly  negative,  and  so  the  density  calculations  for  the  mismatched  filters  quickly 
drop  off  toward  zero.  On  the  other  hand,  the  exponential  terms  corresponding  to  the  best  matched 
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filters  approach  a  finite  positive  value,  e  The  terms  corresponding  to  the  more  closely  matched 
filters  will  then  dominate  when  the  probability  is  calculated  using  Equation  (2.19). 

2. 3.2.2  MMAE  Convergence.  The  ability  of  the  MMAE  to  converge  to  the  correct 
hypothesis  is  guaranteed  theoretically  [9,15,34]  under  certain  specified  conditions.  These  proofs, 
however,  require  that  the  modelled  characteristic  sl^  match  the  true  characteristic  perfectly.  The 
only  assurance  of  convergence  if  this  is  not  the  case  (i.e.,  always)  is  that  the  algorithm  will  converge 
to  the  modelled  characteristic  closest  to  the  true  characteristic  in  the  Baram  distance  sense  [2-4]. 
These  proofs  give  no  guarantee  to  the  convergence  rate.  For  this  thesis  effort,  empirical  studies  of 
failures  in  flight  control  systems  have  shown  that  the  filters  converge  in  a  reasonable  amount  of  time 
(on  the  order  of  seconds  or  fractions  of  seconds). 

2.3. 2.3  Forming  an  MMAE  Estimate.  In  MMAE,  there  are  two  standard  ways  to 
obtain  a  state  estimate.  Each  method  uses  the  elemental  probabilities  calculated  in  Ekjuation  (2.19). 
The  difference  between  the  two  methods  lies  in  how  the  best  parameter  and  state  vector  estimates 
are  chosen.  The  Bayesian  method  blends  the  hypothesized  parameter  vectors  and  state  estimates 
of  each  filter  based  on  their  associated  filter’s  conditional  probability  to  form  a  conditional  mean 
estimate,  while  the  maximum  a  posteriori  (MAP)  method  takes  a  maximum  likelihood  approach  to 
form  a  conditional  mode  estimate. 

First,  the  Bayesian  method  uses  the  conditional  mean  as  its  best  estimates  of  the  system  pa¬ 
rameter  vector  and  system  state  vector.  The  Bayesian  method  determines  the  best  system  param¬ 
eter  vector  estimate,  using  a  weighted  blending  of  the  elemental  filters’  hypothesized 

system  parameter  vectors.  Analogously,  the  Bayesian  method  determines  the  best  system  state  vec¬ 
tor  estimate,  using  a  weighted  blending  of  the  elemental  filters’  system  state  vector 

estimates.  The  appropriate  weighting  placed  during  blending  is  the  conditional  probability  associ¬ 
ated  with  each  elemental  filter.  The  Bayesian-computed  best  system  state  vector  estimate  can  be 
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expressed  as 


K 


=  E  =  Zi}  =  J2Mtt)Pk{ti) 


k=l 


and  the  Bayesian-computed  best  parameter  value  estimate  can  be  expressed  as 


K 


-  E  HU)\Z{ti)  =  Zi}  =  J2^k{ti)Pk{ti) 


(2.24) 


(2.25) 


k=l 


The  Bayesian-computed  state  estimate  is  shown  in  Figure  1.  A  Bayesian-computed  parameter 
value  could  be  depicted  by  replacing  the  product  summation  “itkPk”  with  the  production  summation 
“afcPfc”,  where  afe(ti)  corresponds  to  each  elemental  filter’s  hypothesis. 


A 


Figure  1.  MMAE  Bayesian  State  Estimate  Block  Diagram 

Second,  the  maximum  a  posteriori  (MAP)  method  uses  the  conditional  mode  (or  value  locating 
the  maximum  of  the  associated  probability  density)  as  its  best  estimates  of  the  system  parame¬ 
ter  vector  and  system  state  vector.  MAP  determines  the  best  system  parameter  vector  estimate, 
the  best  system  state  vector  estimate,  the  parameter  value  hypoth¬ 

esized  and  state  estimate  given  by  the  single  elemental  filter  with  the  highest  conditional  probability. 
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This  MAP-computed  best  system  state  vector  estimate  can  be  expressed  as 

where  j  =  arg  jmax  [pfc(ii)]|  (2.26) 

where  arg{max  [•]}  is  the  argument  of  the  maximum  being  performed.  Similarly,  the  MAP -computed 
best  parameter  vector  estimate  can  be  expressed  as 

(*i)  ’^here  j  =  arg  |m^  Ipkik)]  |  (2.27) 

The  MAP-computed  state  estimate  could  be  depicted  using  the  block  diagram  in  Figure  1  with  the 
product  summation  ^^XkPk'  replaced  with  the  production  summation. where 


Pfc  =  0  for  k^j 


=  1  for  /c  =  (2.28) 

An  MAP-computed  parameter  value  could  be  depicted  by  replacing  the  product  summation  “XjtPA:” 
with  the  production  summation  “a/cp^”  ,  where  was  defined  in  Equation  (2.28)  and  a.k{ti)  corre¬ 
sponds  to  each  elemental  filter’s  hypothesis. 

Notice  that  can  only  be  one  of  the  hypothesized  values  for  the  system  parameter  a. 

The  Bayesian  method  is  appealing  because  the  resultant  rieed  not  be  a  hypothesized 

parameter  vector.  Admittedly,  the  true  parameter  vector  will  not  likely  fall  on  a  hypothesized 
parameter  vector;  thus,  the  Bayesian  method  attempts  to  provide  a  better  parameter  estimate  than 
MAP  when  this  is  the  case.  For  this  research  effort,  the  Bayesian  approach  will  be  taken. 

2. 3. 2. 4  Review.  It  is  important  to  review  what  information  MMAE  provides.  For  each 
filter  and  its  assumed  parameter  value  a^,  MMAE  provides  a  state  estimate,  Xk{it)^  filter- 
computed  covariance,  A^,  and  the  MMAE-computed  conditional  probability,  Pk{U)'  Further,  using 
conditional  probability  values,  MMAE  determines  the  best^  estimate  of  the  system  parameter  vector, 
^MMAE  {tf )  j  and  system  state  vector,  xmmae  {tf)- 

^Recall  this  is  done  through  either  the  MAP  or  Bayesian  approach. 
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2,3.3  Control 


In  most  applications,  the  problem  is  not  complete  with  just  system  parameter  and  state  vector 
estimation.  Often  times,  the  main  goal  is  to  apply  the  appropriate  control  to  the  system.  An 
appropriate  control  vector  can  be  extracted  from  the  multiple  model  structure.  While  there  are 
several  ways  to  form  the  appropriate  control  vector  within  a  multiple  model  framework,  two  are 
discussed  here:  Multiple  Model  Adaptive  Control  and  MMAE-based  control. 


Figure  2.  Multiple  Model  Adaptive  Control  Block  Diagram 

The  first  method  is  Multiple  Model  Adaptive  Control  (MMAC),  shown  in  Figure  2.  In  MMAC, 
appropriate  controllers  are  design  for  each  hypothesized  a^.  The  input  to  each  controller  is  the  sys- 
tern  state  vector  estimate  from  the  elemental  Kalman  filter  associated  with  that  controller,  X;.  {tf ) . 
The  output  of  each  controller  is  the  appropriate  control  vector,  (ti),  based  solely  on  the  hypoth¬ 
esized  system  parameter  vector,  a-k,  given  the  input  Xjt  (tf ).  Then,  just  as  MMAE  determines  the 
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^mmae{U)  or  XMMAE{it)^  MMAC  determines  the  best  control  vector,  Ummac(^0-  There¬ 
fore,  ummac(U)  inay  consist  of  a  weighted  blend  of  all  the  control  vectors  given  by  the  elemental 
controllers,  denoted  where  the  weighting  is  the  conditional  probability  associated  with 

each  elemental  filter  (as  shown  in  Figure  2),  or  it  may  consist  of  only  the  control  vector  from  the 
elemental  controller  that  corresponds  to  the  filter  with  the  highest  conditional  probability,  denoted 
(by  redefining  the  p^s  in  Figure  2  as  discussed  previously  in  Equation  (2.28)). 


Figure  3.  Multiple  Model  Adaptive  Estimation  Based  Control  Block  Diagram 

The  second  method  is  MMAE-based  control,  shown  in  Figure  3.  The  “MMAE”  block  rep¬ 
resents  the  block  diagram  shown  in  Figure  1.  In  MMAE-based  control,  one  controller  is  used  to 
determine  the  control  vector.  MMAE  is  used  to  determine  the  best  estimate  of  the  system  param¬ 
eter  vector,  ^MMAEiii)^  and  the  system  state  vector,  '^mmae  {^t)'  The  controller  provides  the 
control  vector,  ummae{U),  based  (possibly)  on  the  system  parameter  vector  ^mmae{U),  given  the 
input  Scmmae  {tf ) ,  If  the  system  state  and  parameter  vector  estimates  were  obtained  through  a 
Bayesian  approach,  the  control  vector  could  be  called  ^^mae^ shown  in  Figure  2).  Like¬ 
wise,  if  the  system  state  and  parameter  vector  estimates  were  obtained  through  a  MAP  approach, 
the  control  vector  could  be  called  ^^ilfAEi^O  (by  redefining  the  p^’s  used  in  the  “MMAE”  block  in 
Figure  2  as  discussed  previously). 

Comparing  these  two  methods,  MMAC  should  provide  the  best  results  because  each  controller 
is  tailored  for  a  particular  a^.  The  disadvantage  is  that  more  memory  storage  may  be  required 
to  include  many  controllers  and,  in  applications  in  which  controllers  already  exist,  designing  new, 
untested  controllers  may  be  unfeasible.  Designing  new  controllers  may  be  avoided  if  MMAE- 

^Recall  this  is  done  through  either  the  MAP  or  Bayesian  approach. 
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based  control  is  used.  Further,  the  designer  could  provide  information  about  the  system  (through 
3LMMAE  {U))  to  the  controller.  The  controller  could  then  be  adaptive,  changing  dependent  upon  the 
estimate  of  the  parameter  vector. 


Figure  4.  Multiple  Model  Adaptive  Estimation  with  Control  Redistribution 

For  this  research,  Control  Redistribution,  a  specific  implementation  of  MMAE-based  control 
using  a  non-linear  post-processor,  is  used  to  redirect  the  control  authority  as  shown  in  Figure  4. 
(Section  3.6  details  the  development,  implementation,  and  modification  of  CR.)  The  single  validated 
controller,  the  VISTA  F-16  Block  40  controller,  is  used  to  generate  control  commands,  but  then 
those  command  outputs  are  redistributed  to  appropriate  actuators,  depending  on  the  estimate  of 
the  failure  status  parameter. 

2.3.4  Hierarchical  Structure 

Recall  that  Multiple  Model  Adaptive  Estimation  (MMAE)  is  based  on  a  set  of  system  parameter 
vector  values.  For  instance,  the  MMAE  in  Figure  1  is  based  on  the  set 

,s.k} 

In  the  case  in  which  the  parameter  vector  represents  the  failure  status  of  an  aircraft,  if  only  single, 
complete  failures  were  considered,  this  would  require  K  =  VI  (one  fully  functional  filter  and  11  filters 
corresponding  to  the  5  actuator  failures  and  6  sensor  failures  of  interest).  If  single  and  dual  failures 
were  considered,  this  would  require 

fllV 

where  K  includes  one  fully  functional  filter,  11  single-failure-only  filters  corresponding  to  the  11 
failures  of  interest,  and  55  additional  dual-failure  combinations  (taken  two  at  a  time  in  which  order 
does  not  matter).  The  resulting  MMAE  bank  would  use  K  =  67  filters!  Each  filter  must  be 
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propagated  and  updated  to  obtain  a  state  estimate,  and  the  conditional  probabilities  for  each  filter 
must  be  calculated  to  be  used  in  forming  a  state  estimate  and  parameter  vector  estimate.  It  can 
be  seen  that  using  one  MMAE  bank  to  handle  single  and  double  failures  simultaneously  can  become 
overwhelming  quickly. 

Although  parallel  computing  greatly  reduces  the  computational  load  of  the  filter  equations  [12, 
17],  the  use  of  a  hierarchical  structure  greatly  reduces  the  number  of  filters  actually  used  simultane¬ 
ously  at  any  one  time  [12].  To  do  this,  the  hierarchical  structure  breaks  A  into  subsets,  where  each 
subset  is  used  in  an  MMAE.  For  instance,  re-consider  single  and  dual  failures  on  an  aircraft,  where 
the  parameter  vector  represents  the  failure  status.  Previously,  one  MMAE  algorithm  considered  67 
hypotheses.  The  hypothesis  set  A  was 

ao,ai,*  ■  ,a.K, 

ai2,ai3,--  -  ,s.iK, 

^  —  J  a2i,a23,a24,*'-  ,^2^,  ^ 

where  K  is  the  number  of  failures.  Note  that  =  Sijk  because  the  order  does  not  matter,  that  is, 
the  failure  model  of  an  aircraft  with  two  failures  does  not  depend  on  the  order  in  which  the  failures 
occurred.  The  hypothesis  ao  is  the  fully  functional  hypothesis  (i.e.,  no  failure).  The  hypotheses  with 
one  index  (i.e.,  ai,a2,  •  •  •  ,ax)  correspond  to  the  11  single-failure-only  hypotheses.  The  hypotheses 
with  two  indices  (for  example,  ai2)  correspond  to  the  dual  failure  combinations.  The  set  A  could 
be  broken  into  the  AT  4- 1  subsets  (or  banks,  B)  of  {K  -h  1) hypotheses  each: 

.Bk] 

where  each  bank  is  defined 

Bq  =  {ao,ai,--*  ,aK} 

Bi  =  {ao,ai,ai2,- ■  ■  ,aix} 

B2  =  {ao,a2i,a2,- •  •  ,a2K} 

Bk  =  {ao,aKi,aK2,**  •  ,aK} 
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The  banks  are  shown  graphically  in  Figure  5.  The  bank  is  considered  “Level  0”  since  all 
hypotheses  are  single  failures.  The  banks  Bi  through  B}^  are  considered  “Level  1”  because  they 
primarily  consist  of  dual-failure  hypotheses.  Also  notice  that  each  “Level  1”  bank  has  a  no-failure 
hypothesis  and  a  single-failure  hypothesis.  The  single-failure  hypothesis  continues  the  declaration 
mode  in  “Level  0”  about  a  specific  single  failure  having  occurred,  while  the  dual-failure  hypotheses 
continue  that  original  failure  declaration  plus  allow  for  any  additional  failure.  Each  bank  can  be 
used  as  the  basis  for  an  MMAE  (as  shown  in  Figure  1).  For  example,  the  MMAE  may  start 
“looking”  for  single  failures  only,  using  bank  Bq  in  “Level  0”.  If  a  single  failure  occurs,  then  the 
MMAE  uses  a  new  bank  in  “Level  1”  to  look  for  dual  failures. 

The  “arrows”  in  Figure  5  show  the  new  bank  in  “Level  1”  that  corresponds  to  the  failure 
hypothesis  in  “Level  0” .  Further,  inside  each  arrow  is  the  hypothesis  that  causes  a  bank  change. 
The  no-failure  hypothesis  is  included  in  each  “Level  1”  bank  in  case  the  declaration  that  caused  the 
use  of  a  new  bank  was  incorrect.  The  single-failure  hypothesis  that  caused  the  use  of  a  new  bank 
is  included  in  the  “Level  1”  bank  in  case  there  is  only  a  single  failure.  Thus,  when  considering 
single  and  dual  failures,  the  number  of  on-line  filters  used  simultaneously  at  any  one  time  is  always 
K  I  —  12,  The  only  additional  load  to  consider  dual  failures  rather  than  single  failures  is  the 
switching  logic! 

2.4  MMAE  in  Practice 

In  engineering,  it  is  essential  to  bridge  the  gap  between  theory  and  practice:  “In  theory^ 
there  is  no  difference  between  theory  and  practice.  In  practice^  there  may  very  well  be  a  substantial 
difference  between  theory  and  practice.  ”  Multiple  Model  Adaptive  Estimation  (MMAE)  presented 
thus  far  is  complete  and  theoretically  sound,  but  many  practical  enhancements  can  be  made  before 
implementation.  To  bridge  this  gap,  this  section  will  present  topics  fashioned  specific  to  this  research, 
including  particular  values  chosen  where  appropriate. 


Figure  5.  Hierarchical  Structure  Set  Definition 
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2.4*  i  Lower  Bounding 


2,4.1.!  Probability  Lower  Bound.  Due  to  the  recursive  nature  of  the  probability  calcu¬ 
lation  given  in  Equation  (2.19),  if  a  probability  ever  becomes  zero,  it  will  remain  zero  thereafter  and 
the  system  will  become  insensitive  to  change.  To  prevent  this  from  occurring,  the  probabilities  are 
artificially  lifted  off  zero  by  introducing  a  probability  lower  bound  [1,23].  Because  the  probabilities 
build  over  time  (again,  due  to  the  recursive  nature  of  Equation  (2.19)),  applying  this  probability 
lower  bound  improves  system  response.  For  this  research  effort,  the  lower  bound  was  selected  to  be 
0.001  [28,43].  Larger  values  force  inappropriately  large  weights  to  be  associated  with  parameter 
values  that  are  actually  incorrect,  while  smaller  values  yield  too  sluggish  a  response  in  computed 
probabilities  when  a  true  parameter  change  occurs. 

An  alternate  approach  to  a  probability  lower  bound  is  to  use  a  Markov  model  to  represent 
parameter  variations  over  time.  A  state  transition  matrix  progresses  a  vector  of  {ti)  probabilities 
from  time  step  to  time  step.  The  advantage  is  the  probability  lower  bound  is  not  needed.  The 
disadvantage  is  the  full  state  transition  matrix  is  usually  not  known.  The  designer  must  employ  ad 
hoc  methods  to  fill  the  state  transition  matrix.  Often  times,  as  with  this  research,  it  is  easier  to 
select  probability  lower  bounds  that  make  sense  than  it  is  to  fill  the  state  transition  matrix. 

2. 4. 1.2  Blending  Lower  Bound.  Placing  a  lower  bound  on  the  probabilities  after  Equa¬ 
tion  (2.19)  is  used  to  compute  thepk  (ti)  values  ensures  that,  no  matter  how  wrong  a  filter’s  estimate 
is,  it  will  have  a  probability  of  at  least  the  lower  bound.  The  Bayesian  method  as  presented  uses  all 
filters  to  provide  state  vector  and  parameter  vector  estimates.  Though  their  associated  probabili¬ 
ties  may  be  small,  filters  based  on  wrong  parameter  values  can  only  degrade  the  MMAE  estimate. 
To  alleviate  this  problem,  the  modified  Bayesian  approach  applies  a  blending  lower  bound  as  well  as 
a  probability  lower  bound.  If  a  conditional  probability  falls  below  some  threshold,  it  is  not  used  in 
the  blending  algorithm  used  to  generate  xmmae  {ti)  or  ^mmae  (ti)-  By  so  doing,  blending  of  state 
estimates  and  parameter  values  from  filters  with  reasonably  large  pk  (ti)'s  is  enabled,  as  desired,  but 
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erroneous  filters’  values  (values  from  filters  with  pfc  (ti)’s  artificially  bounded  by  minimum  values) 
do  not  corrupt  Xmmae  {k)  or  ^mmae  (U)-  A  blending  lower  bound  of  0.003  will  be  used  for  this 
research  [10,11]. 

2.4’ Summary.  There  are  two  lower  bounds  used  in  this  research,  a  blending  lower 
bound  of  0.003  and  a  probability  lower  bound  of  0.001.  If  the  probability  or  blending  lower  bound 
is  used,  then  the  probabilities  must  be  re-scaled  to  sum  to  one.  This  research  effort  incorporates 
such  logic  [8,28,43]. 

2,4*2  Beta  Dominance 

Beta  dominance'^  [1]  is  the  tendency  of  the  probability  evaluator  to  calculate  probabilities 
incorrectly  because  of  an  erroneous  contribution  by  the  term  of  Ekjuations  (2.21)  and  (2.22). 
The  result  is  a  tendency  to  declare  incorrect  failures  corresponding  to  filters  with  the  smallest 
precomputed  residual  covariance,  A^.  Consider  the  situation  where  two  filters  have  nearly  the 
same  value  for  the  likelihood  quotient,  Li  =  L2  —  L.  One  would  expect  that  the  MMAE  would 
assign  equal  probabilities  to  both  filters,  and  indeed  the  exponential  term  of  the  probability  density. 
Equation  (2.21),  will  have  the  same  value,  e”  2^.  However,  the  term  will  typically  differ,  based 
on  the  magnitude  of  the  covariance,  |Afc|,  resulting  in  the  filter  with  the  smaller  (in  the  norm  sense) 
filter-predicted  covariance  being  weighted  more  highly  than  the  other.  Recall  from  Equation  (2.6) 
that  the  residual  covariance  is  calculated  as  Ak{ti)  =  k{U~  +  Rfc,  and  that  its  value  has 

nothing  to  do  with  the  correctness  or  incorrectness  of  a  hypothesized  parameter  value.  In  this 
research  effort,  the  H  matrix  for  some  filters  (those  associated  with  sensor  failures)  will  have  a  row 
of  zeros  (see  Section  3.5).  All  other  things  equal,  the  filter  with  the  row  of  zeros  will  have  a  smaller 
Afc  and  will  be  given  higher  probability.  Research  has  shown  this  effect  [28,43]. 

Two  methods  have  been  used  to  remove  the  beta  dominance  effect.  The  first  uses  scalar  resid¬ 
ual  monitoring  [43],  discussed  in  Section  2.4.6,  to  provide  additional  votes  to  determine  whether 
a  declaration  is  correct.  While  demonstrated  effective  at  eliminating  false  alarms  (on  sensor  fail- 

^This  section  is  heavily  based  upon  Stepaniak’s  thesis  [41]. 
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ures)  [28,31,32,43],  this  method  does  not  prevent  beta  dominance  from  adversely  affecting  the 
MMAE  by  introducing  erroneously  high  probabilities.  A  second  technique  simply  removes  the  (3^ 
term  altogether,  i.e.,  equates  all  to  one,  in  Equation  (2.21)  [29,43].  This  technique  has  demon¬ 
strated  even  better  results  than  that  of  residual  monitoring  [10, 11,27],  and  will  be  used  in  this 
research.  Even  though  the  resulting  expression 

(2.29) 

is  no  longer  a  proper  Gaussian  density  (the  area  under  the  function  is  not  unity),  this  is  of  no  overrid¬ 
ing  concern  since  the  density  function  is  used  only  to  calculate  thepfc  probabilities  in  Equation  (2. 19) . 
The  normalizing  effect  of  the  denominator  in  Equation  (2.19)  assures  that  use  of  Equation  (2.29) 
still  yields  a  valid  set  of  probabilities  in  the  sense  that  Equation  (2.20)  is  satisfied. 

2,4*^  Scalar  Penalty 

The  scalar  coefficient^  of  in  the  exponential  term  of  Equation  (2.21)  is  directly  related  to  the 
sensitivity  of  the  MMAE  [27].  Increasing  the  magnitude  of  this  term  drives  probabilities  associated 
with  large  residuals  to  zero  faster.  Ideally,  this  should  result  in  a  faster  adaptation  process;  however, 
increasing  the  scalar  penalty  also  increases  the  incidence  of  false  alarms.  The  — coefficient  can 
then  be  treated  as  a  sensitivity  gain  which  can  be  adjusted  to  tune  performance.  For  this  research, 
the  scalar  coefficient  is  maintained  at  the  original  value  of  — 

2. 4^4  Dither 

Dither^  is  the  introduction  of  low  magnitude  control  signals  in  order  to  excite  the  system  and 
enhance  identifiability.  To  illustrate  the  need  for  a  dither  signal,  consider  an  aircraft  flying  in  a 
straight  and  level  flight  path.  Should  a  rudder  fail,  the  loss  or  degradation  in  control  authority  may 
well  go  unnoticed  by  both  the  pilot  and  the  adaptive  controller,  particularly  if  the  surface  fails  in  such 
a  manner  that  it  floats  in  the  relative  wind  (a  failure  to  free  stream).  Only  after  the  pilot  initiates  a 
maneuver  will  the  residuals  in  the  MMAE  begin  to  reflect  the  change  in  system  parameters,  resulting 

®This  section  is  heavily  based  upon  Stepaniak’s  thesis  [41]. 

®This  section  is  heavily  based  upon  Stepaniak’s  thesis  [41], 
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in  a  period  of  degraded  performance  until  the  failure  is  declared.  A  better  design  detects  the  failure 
when  it  happens  regardless  of  flight  path,  allowing  the  MMAE  to  reconfigure  appropriately  and 
provide  maximum  performance  to  the  pilot  at  all  times.  Subliminal  dither  signals  force  this  early 
detection  by  exercising  the  control  surfaces,  which  excites  the  state  vector.  Any  deviation  from  the 
filter-predicted  state  values  will  then  show  up  in  the  residuals  and  trigger  a  failure  declaration. 

Though  several  forms  of  dither  have  been  suggested  [31,32],  varying  waveform,  frequency 
content,  and  amplitude,  arguably  the  best  for  enhancing  failure  detection  is  a  simple  sinusoid  since  a 
single  sinusoid  at  a  known  frequency  is  so  simple  to  detect  in  a  signal  (the  appearance  of  the  dither 
signal  in  the  filter  residual  is  indicative  of  the  filter’s  assumed  parameter  value  being  incorrect  [27, 
31,32]).  A  periodic  dither  has  the  additional  advantage  that  sophisticated  algorithms  can  monitor 
the  residuals  not  just  for  magnitude  but  also  for  frequency  effects  corresponding  to  the  input  dither. 
By  sending  a  different  frequency  or  phase  to  each  channel,  the  confounding  effects  of  cross-coupling 
between  channels  can  be  minimized. 

In  applications  in  which  humans  are  involved,  as  in  this  research,  dither  signals  need  to  be 
subliminal.  An  associated  drawback  is  the  smaller  amplitudes  required  for  subliminal  dither  are 
less  effective  at  enhancing  parameter  identification.  An  alternative  implementation  may  be  to 
introduce  larger  magnitudes,  but  infrequently  and  only  for  short  periods  of  time,  possibly  even 
allowing  the  human  to  control  their  application.  Note  that  dither  is  only  needed  during  benign 
conditions  when  the  MMAE  does  not  receive  enough  information  to  make  accurate  decisions.  During 
strong  maneuvers,  the  system  is  excited  sufficiently  without  the  addition  of  dithering.  In  fact,  dither 
may  not  be  needed  at  all  if  humans  were  trained  to  induce  maneuvers  which  shook  up  the  system 
either  periodically  throughout  the  flight  or  just  before  the  onset  of  deliberate  maneuvers. 

The  dither  signal  used  in  this  research  is  chosen  based  on  previous  research  [18,41,42]  to  be 
sinusoidal  with  a  frequency  of  15  Hz.  The  effects  of  vibration  on  human  subjects  was  researched 
in  the  1960’s  in  conjunction  with  the  space  program  [13,38].  Although  scientists  at  the  time  were 
considering  unwanted  vibrations,  their  conclusions  are  equally  pertinent  to  dither,  which  can  be 
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thought  of  as  an  induced  vibration.  Based  on  their  findings,  the  limits  on  maximum  allowable  dither 
magnitude  response  used  for  this  research  is  set  to  be  ±  0.1  g’s  in  the  longitudinal  channel  and  ± 
0.2  g’s  in  the  lateral  channel.  The  signal  applied  is  not  considered  subliminal;  rather,  it  should  be 
thought  of  as  tolerable  to  the  pilot. 

2.4*5  Probability  Smoothing  and  Quantization 

As  the  conditional  probabilities  progress  through  time,  they  may  exhibit  transients  or  jagged 
behavior  before  converging  to  the  correct  solution.  Probability  smoothing  [27]  is  introduced  to 
reduce  the  possibility  that  the  MMAE  will  declare  false  alarms  based  solely  on  transients.  Removing 
these  false  alarms  becomes  even  more  important  when  using  a  hierarchical  structure  since  an  alarm 
declaration  results  in  the  onset  of  a  new  bank  of  MMAE  filters.  The  probabilities  are  smoothed  by 
averaging  over  a  moving  window  of  a  given  size,  which  is  specific  to  each  application.  Probability 
quantization  may  be  used  to  force  the  probabilities  to  discrete  values.  This  may  be  useful  in  making 
decisions  and  in  applying  blending  techniques  [8].  For  this  research,  no  probability  smoothing 
(effectively,  a  window  size  of  one)  or  probability  quantization  is  used. 

2.4*6  Scalar  Residual  Monitoring 

The  MMAE  calculates  probabilities  based  on  the  likelihood  quotient ,  Lk  {ti ) .  Additional  insight 
can  be  gained  by  monitoring  the  scalar  residuals  themselves^^  [28,31,32,43].  Some  hypotheses^ ^  may 
appear  not  only  as  an  increase  in  the  likelihood  quotient,  but  also  as  a  direct  increase  in  one  of  the 
corresponding  scalar  residuals.  Checking  these  terms  can  then  be  used  as  an  additional  vote  either 
to  increase  the  convergence  time  if  there  is  an  indication  of  convergence  to  the  wrong  hypothesis,  or 
to  eliminate  false  alarms.  For  example,  when  beta  dominance  causes  false  alarms  due  to  a  particular 
filter,  the  MMAE  algorithm  can  test  the  scalar  residual  corresponding  to  that  filter.  If  the  result  of 
the  test  does  not  corroborate  the  declaration,  then  the  declaration  is  labeled  false  and  is  ignored. 


^^This  section  is  heavily  based  upon  Stepaniak’s  thesis  [41]. 

^^Past  research  has  shown  that  a  failed  sensor  is  manifested  in  such  a  manner. 


26 


Several  methods  exist  for  testing  scalar  residuals,  all  of  which  rely  on  the  statistical  properties 
of  residuals,  which  are  white  Gaussian  processes  with  zero  mean  and  a  variance  of  the  appropriate 
diagonal  term  of  Afc(ti),  provided  that  the  presumed  hypothesis  is  correct.  A  simple  way  to 
evaluate  the  whiteness  of  the  residual  is  to  count  the  number  of  zero  crossings  [31,32],  once  the 
residuals  are  corrected  for  zero-meanness.  A  white  process  is  indicated  by  a  significantly  higher 
count  than  would  be  present  for  colored  noise.  In  practice,  an  arbitrary  threshold  can  be  set,  above 
which  whiteness  is  declared  satisfied.  Another  test  for  correct  variance  versus  whiteness  counts  the 
number  of  times  that  the  residual  breaks  the  ±(J  boundaries  [23].  For  a  true  Gaussian  distribution, 
the  residual  should  be  inside  the  one-cr  boundary  68.3%  of  the  time.  Similarly,  statistics  for  the  two- 
and  three-cr  boundaries  are  95.4%  and  99,7%,  respectively.  A  third  test  is  to  calculate  the  mean  of 
a  finite  number  of  samples.  Any  deviation  from  a  small  range  about  zero  could  then  indicate,  or  be 
used  to  corroborate,  a  declaration. 

Other  more  sophisticated  tests  also  exist,  such  as  calculating  the  scalar  quadratic  term 
representing  the  ratio  of  the  true  square  of  the  scalar  residual  to  its  filter  predicted  variance  in 
the  k^^  elemental  filter  [31,32].  Similar  to  the  likelihood  quotient  calculation,  filters  with  the  correct 
hypothesis  will  have  residual-squared  values  most  in  consonance  with  the  filter’s  predicted  variance. 
This  method  is  particularly  useful  for  detecting  hypotheses  which  tend  to  affect  a  single  scalar 
residual,  rather  than  hypotheses  which  appear  in  multiple  scalar  residuals  (and  are  thus  harder  to 
detect  in  general  for  any  method).  Also,  if  dither  in  the  form  of  a  sinusoid  at  a  known  frequency 
is  applied,  the  appearance  of  that  dither  frequency  in  a  given  residual  is  another  indication  of 
incorrectness  of  the  corresponding  hypothesis  [27,31,32].  The  dither,  which  is  very  nonwhite  and 
easily  detected  since  it  is  of  known  frequency,  should  not  appear  in  the  otherwise  zero-mean,  white 
residuals  if  the  corresponding  hypothesis  is  correct.  In  this  research,  scalar  residual  monitoring  will 
not  be  used. 
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2.5  Chapter  Summary 

This  chapter  was  meant  to  provide  a  basic  overview  of  MMAE  in  general.  The  history  of 
MMAE  was  given,  from  its  early  development  to  its  current  use  on  the  VISTA  F-16.  The  building 
blocks  of  MMAE  were  reviewed.  A  Kalman  filter  based  upon  one  system  parameter  vector  realiza¬ 
tion  provides  a  single  system  state  vector  estimate.  Putting  multiple  Kalman  filters  together  based 
upon  different  system  parameter  vector  realizations,  a  MMAE  can  provide  a  better  state  vector  esti¬ 
mate  than  a  single  Kalman  filter  and  provides  a  system  parameter  vector  estimate.  Putting  multiple 
MMAE  banks  together,  a  hierarchical  structure  can  cover  a  larger  set  of  system  parameter  vector 
realizations  while  minimizing  the  number  of  on-line  filters.  To  go  from  these  theoretical  building 
blocks  to  practice,  we  bridge  the  gap  by  applying  practical  enhancements  such  as  probability  lower 
bounds,  blending  lower  bounds,  beta  dominance  alleviation  techniques,  dither,  gain  adjustments  of 
scalar  penalties,  probability  smoothing,  probability  quantization,  and  scalar  residual  monitoring. 
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Chapter  3  -  Problem  Definition  and  Design  Model 

3.1  Chapter  Overview 

This  chapter  provides  the  models  used  for  this  research  effort,  stepping  the  reader  from  the 
“real  world”  to  the  truth  model  to  the  design  model.  The  “real  world”  VISTA  F-16  is  introduced 
in  Section  3.2.  The  truth  model,  a  high-fidelity  representation  of  the  “real  world”  VISTA  F-16, 
is  presented  in  Section  3.3.  A  design  model  (of  reduced-order  compared  to  the  truth  model)  is 
presented  in  Section  3.4.  Modifications  to  the  truth  model  and  design  model  to  incorporate  failures 
are  presented  in  Section  3.5.  Control  Redistribution  is  presented  and  modified  in  Section  3.6. 

3.2  meal  World’^ 

This  research  is  performed  on  the  Variable-Stability  In-flight  Simulator  Test  Aircraft  (VISTA) 
F-16.  This  aircraft  was  developed  to  provide  an  in-flight  simulator  for  various  high  performance 
military  aircraft.  The  control  system  of  the  VISTA  F-16  can  be  configured  so  that  the  aircraft  will 
emulate  the  characteristics  of  other  aircraft.  This  capability  provides  an  extremely  flexible  tool 
to  develop  and  evaluate  aircraft  control  systems.  This  capability  also  provides  a  safe  and  realistic 
means  to  train  pilots  for  these  systems.  The  VISTA  F-16  was  built  using  a  modified  F-16D  airframe 
by  Calpsan  and  General  Dynamics  [33]. 

The  principle  reason  for  using  the  VISTA  F-16  in  this  research  is  to  facilitate  the  continuation 
of  previous  research  which  has  been  performed  at  AFIT  [8,10, 11, 18,31,32,41,42].  Originally,  the 
primary  reason  for  choosing  this  platform  was  based  on  the  availability  of  an  accurate  truth  model 
and  advanced  simulation  tools  at  the  Air  Vehicles  Directorate,  Air  Force  Research  Laboratory, 
Wright  Patterson  Air  Force  Base,  OH  (formerly  Wright  Laboratory). 

3.3  Truth  Model 

In  order  to  evaluate  the  performance  of  the  MMAE  and  Control  Redistribution  algorithm,  a 
truth  model  is  needed  which  will  provide  an  accurate  simulation  of  the  real  world  environment  and  a 
proper  statistical  portrayal  of  estimation  errors  committed  by  each  filter  and  the  MMAE  in  that  “real 


world''  environment  [22],  As  mentioned  in  Section  3.2,  the  truth  model  was  provided  by  the  Flight 
Dynamics  Directorate,  Air  Force  Research  Laboratory,  Wright  Patterson  Air  Force  Base,  OH. 

The  VISTA  simulation  used  for  the  truth  model  runs  as  part  of  the  Simulation  Rapid-prototyping 
Facility  (SRF)  and  incorporates  General  Dynamics’  VISTA  F-16  simulation  software  with  variable 
stability  flight  control  system  software  provided  by  Calpsan.  The  SRF  VISTA  F-16  simulation 
provides  a  full  six-degree-of-freedom  truth  model  incorporating  the  aircraft’s  nonlinear  equations  of 
motion,  advanced  actuator  modeling,  the  complete  Block  40  controller,  and  the  aileron-to-rudder 
interconnect  used  to  provide  coordinated  turns.  The  Transportable  Applications  Executive  (TAE) 
provides  the  interface  to  allow  the  user  to  configure  the  F-16,  select  a  flight  condition,  and  command 
the  pilot  inputs  in  non-real  time. 

Throughout  this  sequence  of  research,  several  modifications  have  been  made  to  the  FORTRAN 
source  code  of  the  SRF  VISTA  F-16  simulation  [8,10,11,18,31,32,41,42].  These  changes  were  made 
to  accommodate  the  multiple  model  architecture  and  to  provide  a  more  accurate  depiction  of  the  real 
world  environment.  These  changes  include  the  incorporation  of  a  more  precise  wind  model  based 
on  a  zero-order  Dryden  wind  model  [10,11,37],  the  incorporation  of  code  which  enhances  failure 
simulation  (allowing  single  or  dual  and  partial  or  complete  failures)  [8, 10, 11, 18,31,32,41,42],  the 
incorporation  of  sensor  noise  [10, 11],  and  the  replacement  of  the  lateral  acceleration  measurement 
computation  by  a  more  realistic  linear  model  [41,42]  (see  Section  3.4.6). 

3.4  Design  Model 

Having  a  truth  model  that  accurately  models  the  “real  world” ,  a  design  model  must  be  found 
such  that  the  MMAE  and  Control  Redistribution  algorithm  based  on  it  can  be  implemented  on  the 
64Hz  digital  flight  computer  of  the  VISTA  F-16,  while  capturing  the  important  characteristics  of 
the  truth  model.  The  design  model  is  selected  as  a  linear,  time-invariant,  discrete-time  model,  of 
reduced  order  compared  to  the  truth  model.  The  truth  model  can  be  of  higher  fidelity  because  it 
is  not  implemented  on  the  digital  flight  computer,  rather  it  is  simply  used  to  verify  the  design. 
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To  obtain  the  design  model,  the  non-linear,  time-variant,  continuous-time  model  is  linearized 
about  a  nominal  aircraft  configuration  and  flight  condition,  providing  a  linear,  time-invariant  model, 
as  discussed  in  Section  3.4.1.  In  Section  3.4.2,  the  input  vector  and  input  matrix  are  redefined  in 
order  to  model  failures  and  apply  Control  Redistribution.  In  Section  3.4.3,  a  design  model  of  the 
actuators  is  developed.  In  Section  3.4.4,  the  actuator  model  is  incorporated  into  the  system  model. 
In  Section  3.4.5,  the  continuous-time  model  is  converted  to  an  equivalent^  discrete-time  model.  In 
Section  3.4.6,  a  discrete-time  measurement  model  is  properly  defined.  Section  3.4.7  will  review  the 
discrete-time,  linear,  time-invariant  design  model. 

3,4 •i  Linearization  About  a  Nominal  Aircraft  Configuration  and  Flight  Condition 
In  order  to  provide  a  linear,  time-invariant  design  model,  the  truth  model  must  be  linearized 
about  a  nominal  aircraft  configuration  and  flight  condition.  The  TAE  provides  three  aircraft 
configurations,  defined  in  Table  1.  To  be  consistent  with  previous  research,  the  aircraft  configuration 
for  this  research  is  selected  as  “up-and-away” .  This  selection  configures  the  aircraft  with  the  leading 
edge  flaps  up  and  the  landing  gear  up,  a  typical  configuration  for  the  steady,  level  flight  assumed. 
The  TAE  also  accommodates  flight  conditions  within  the  flight  envelope  of  the  VISTA  F-16.  To  be 
consistent  with  previous  research,  the  flight  condition  for  this  research  is  a  speed  of  Mach  0.4  and  an 
altitude  of  20,000  feet.  This  flight  condition  was  chosen  because  it  results  in  a  low  dynamic  pressure, 
causing  failure  detection  to  be  more  difficult^^.  Thus,  the  intent  is  to  demonstrate  algorithm 
capabilities  in  the  most  challenging  environment  for  failure  detection,  rather  than  under  the  most 
favorable  conditions. 


Table  1.  Aircraft  Configurations 


Aircraft  Configuration 

Leading  Edge  Flaps 

Landing  Gear 

Takeofr 

Up 

Down 

Up-and-away 

Up 

Up 

Landing 

Down 

Down 

is  assumed  that,  in  low  dynamic  pressure,  actuators  have  less  control  authority  than  in  high  dynamic  pressure. 
Therefore,  the  effects  of  a  failed  actuator  may  be  more  difficult  detect. 
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With  the  aircraft  configured  and  the  flight  condition  chosen,  a  linear,  time- invariant  (LTI) 
design  model  can  be  formed  as 


X  (t)  =  Ax  (t)  +Bu  (t)  -h  Gw  (t)  (3.1) 

where  x(t)  is  the  state  vector,  A  is  the  plant  matrix,  u  (t)  is  the  control  vector,  B  is  the  input 
matrix,  w  (t)  ^is  the  dynamics  driving  noise,  and  G  is  the  noise  injection  matrix. 


3. 4*1,1  State  Vector.  The  state  vector  defined  in  Equation  (3.1)  is  described  in  Table  2.  It 
is  grouped  in  longitudinal  components  {0,'U,  a,  q}  and  lateral  components  {^, /3,p,r}.  These  chan¬ 
nels  are  assumed  independent,  as  the  form  of  A  in  Equation  (3.2)  in  the  next  paragraph  indicates. 


Table  2.  State  Vector  Description 


Symbol 


Description 


Units 


e 

Pitch  Angle 

rad 

U 

Forward  Velocity 

ft/sec 

a 

Angle  of  Attack 

rad 

Q 

Pitch  Rate 

rad/sec 

4> 

Bank  Angle 

rad 

P 

Sideslip  Angle 

rad 

V 

Roll  Rate 

rad/sec 

r 

Yaw  Rate 

rad/sec 

3.4>1»2  Plant  Matrix.  The  plant  matrix.  A,  used  in  Equation  (3.1)  is  defined  as 


0 

0 

0 

1 

0 

0 

0 

0 

Xi 

XL 

K 

0 

0 

0 

0 

Z'u 

ZL 

Z', 

0 

0 

0 

0 

K 

ML 

M' 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

K 

0 

0 

0 

0 

Y' 

n 

n 

y; 

0 

0 

0 

0 

0 

L'p 

L'r 

0 

0 

0 

0 

0 

N' 

lyp 

K 

(3.2) 


Notice  the  longitudinal  derivatives  in  the  upper  left  are  augmented  with  the  lateral  derivatives  in 
the  lower  right.  The  variables  and  F'  represent  the  aerodynamic  forces  in  the  a),y,  and 

aircraft  body  frame  axes,  respectively.  The  aircraft  body  frame  is  defined  with  the  positive  cc-axis 
out  the  nose  of  the  aircraft,  the  positive  y-axis  out  the  right  wing  of  the  aircraft,  and  the  positive 
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;2;-axis  in  the  down  direction  to  complete  a  right-hand  reference  frame,  where  the  origin  is  arbitrarily 
placed  in  the  body  of  the  aircraft.  (The  origin  is  fixed  during  the  design  stages  of  the  airframe  and 
does  not  coincide  with  the  center  of  gravity.  The  center  of  gravity  varies  with  payload.  The  vector 
from  the  origin  to  the  center  of  gravity  is  defined  as  Xcgt-\-  Zcgk  where  %  and  k  are  unit  vectors  in  the 
X  and  2;  axes  directions,  respectively,  and  the  difference  in  the  ^-axis  direction  is  usually  neglected.) 
The  variables  and  represent  the  moments  about  the  and  axes,  respectively.  The 

primed  notation,  indicates  that  the  variables  are  in  terms  of  the  angle  of  attack,  a,  and  sideslip 
angle,  /?,  rather  than  the  velocities  v  and  w  in  the  y  and  2;  axes  directions  respectively.  The  variable 
subscript  is  a  shorthand  notation  indicating  a  partial  derivative  (for  example,  Xg  =  ).  The 

subscript  symbols  correspond  to  the  states  defined  in  Table  2.  For  example,  Xg  could  be  read,  ^‘the 
partial  derivative  of  the  aerodynamic  force  in  the  x-axis  direction  with  respect  to  the  pitch  angle,” 
or  more  descriptively,  “the  change  in  the  aerodynamic  force  in  the  x-axis  direction  due  to  a  change 
in  the  pitch  angle.” 


Input  Vector,  The  input  vector  defined  in  Equation  (3.1)  is  described  in  Table  3. 


Table  3.  Input  Vector  Description 


Symbol 


Description 


Units 


Elevator  Position 

rad 

Sdt 

Differential  Tail  Position 

rad 

Sf 

Flap  Position 

rad 

Sa 

Aileron  Position 

rad 

5r 

Rudder  Position 

rad 

3. 4*1  *4  I'n.put  Matrix,  The  input  matrix,  B,  used  in  Equation  (3.1)  is  defined  as 


0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

Mi 

0 

Mi 

0 

0 

0 

0 

0 

0 

0 

0 

yL 

0 

yi 

yi 

0 

LL 

0 

Li 

Li 

0 

NL 

0 

Ni 

K 

(3.3) 
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Again,  the  variables  and  represent  the  aerodynamic  jorces  in  the  and  ^  axes,  re¬ 

spectively,  and  the  variables  L',  M',  and  iV'  represent  the  moments  about  the  x,y,  and  ^  axes, 
respectively.  As  before,  the  primed  notation,  ',  indicates  that  the  variables  are  in  terms  of  the  angle 
of  attack,  a,  and  sideslip  angle,  and  the  variable  subscript  indicates  a  partial  derivative.  The 
subscript  symbols  correspond  to  the  inputs  defined  in  Table  3.  For  example,  could  be  read, 
“the  partial  derivative  of  the  aerodynamic  force  in  the  x-axis  direction  with  respect  to  the  elevator 
position,”  or  more  descriptively,  “the  change  in  the  aerodynamic  force  in  the  x-axis  direction  due  to 
a  change  in  the  elevator  position.” 

3,4, 1.5  Dynamics  Driving  Noise.  The  dynamics  driving  noise  vector,  w(t),  as  defined 
in  Equation  (3.1)  is  considered  white  Gaussian  noise,  with  a  mean  of  zero  and  strength  Q  as  given 
in  Table  4.  From  the  definition  of  Q,  it  can  be  seen  that  vj  (t)  is  a  6x1  vector  with  white  Gaussian 
noise  pertaining  to  the  states  {ti,  a,  r}.  Further,  notice  that  the  white  Gaussian  noise  for  a 

is  correlated  with  the  white  Gaussian  noise  for  q  and  the  white  Gaussian  noise  for  /3  is  correlated 
with  the  white  Gaussian  noise  for  r.  All  other  noises  are  assumed  uncorrelated. 


Table  4.  Dynamics  Driving  Noise  Description 


Q 

Average 

Noise  Strength 

Units 

Q(i,i) 

u 

4.5  X  10-^ 

ft^/rad  ■  sec 

Q(2.2) 

a 

3.0  X  10-*^ 

rad  •  sec 

Q(2,3) 

a  vs.  q 

1.1  X  10-** 

rad 

Q(3,3) 

q 

1.5  X  10-“ 

rad/ sec 

Q(4,4) 

P 

6.0  X  10-“ 

rad/ sec 

Q(5,5) 

p 

3.0  X  10-“ 

rad • sec 

Q(5,6) 

(3  vs.  r 

6.3  X  lO-"' 

rad 

Q(6.6) 

r 

2.4  X  10-'> 

rad/ sec 

3.4*1>5  Noise  Injection  Matrix.  The  noise  injection  matrix,  G,  defined  in  Equation  (3.1) 
is  described  as 
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G 


(3.4) 


0 

0 

0 

0 

0 

0 

X' 

K 

0 

0 

0 

K 

0 

0 

0 

Mi 

Mi 

Mi 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

y; 

y; 

0 

0 

0 

Li 

Li 

L’r 

0 

0 

0 

K 

Ni 

Ni 

Notice  that  G  is  a  8ic6  matrix,  where  the  eight  rows  correspond  to  the  system  states  and  the  six 
columns  correspond  to  the  six  white  Gaussian  noises  described  as  w  (t) . 

Evaluation  of  the  Plant,  Input,  and  Noise  Injection  Matrices,  Because 
the  design  model  is  linearized  about  an  aircraft  configuration  and  flight  condition,  the  stability 
derivatives  are  constant  (thereby  yielding  a  time-invariant  design  model).  Thus,  the  A,  B,  and  G 
matrices  are  time-invariant  and  can  be  filled  with  actual  values  for  this  design.  These  values  can  be 
found  in  Appendix  A.  The  stability  derivatives  are  dimensional]  the  interested  reader  can  verify 
that  the  units  are  consistent  throughout  the  equations. 

Further,  the  open-loop  eigenvalues  of  the  system  can  be  obtained  by  evaluating  the  plant 
matrix.  It  is  worth  noting  that  the  plant  matrix  contains  an  unstable  longitudinal  eigenvalue, 
making  this  flight  control  problem  even  more  challenging  [8].  Appendix  A  details  the  eigenvalues 
for  the  open-loop  plant. 

3,4  Redefine  the  Input  Vector  and  Input  Matrix 

3.4' Input  Vector,  The  input  vector  defined  in  Table  3  is  a  conventional  choice  of 
surface  positions.  Stepaniak  [41,42]  developed  a  clever,  equivalent  choice  of  surface  positions  to 
redefine  the  input  vector  in  order  to  model  failures  more  easily  and  apply  Control  Redistribution 
(see  Section  3.6).  Rather  than  defining  the  input  vector  in  conventional  terms,  the  input  vector  is 
redefined  in  physical  terms.  Recall  the  input  vector  was  defined  as 

u(f)=[5e(i)  S.tit)  5  fit)  Sait)  5^(4)]"^  (3.5) 
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where  the  components  are  elevator  position,  differential  tail  position,  flaps  position,  aileron  position, 
and  rudder  position,  respectively.  The  physical  control  surfaces  that  perform  these  functions  are 
the  left  stabilator,  right  stabilator,  left  fiaperon,  right  flaperon,  and  rudder. 


Table  5.  Modified  Input  Vector  Description 


Input  Vector 


(^)  — 


Sis  {t) 
Srs  {t) 

Slf  (t) 

Srf  {t) 
Sr  {t) 


Symbol 


Description 


Units 


Sis 

Left  Stabilator  Position 

rad 

Srs 

Right  Stabilator  Position 

rad 

Slf 

Left  Flaperon  Position 

rad 

Srf 

Right  Flaperon  Position 

rad 

6r 

Rudder  Position 

rad 

The  input  vector  in  terms  of  the  physical  control  surface  positions,  termed  the  modified  input 
vector,  is  defined  in  Table  5.  The  modified  input  vector  is  repeated  here  as 

Umod  (i)  =  [  W  ^rs{t)  Sif{t)  Srf{t)  (3.6) 

To  illustrate  the  relationship  between  the  conventional  notation  and  the  physical  notation,  consider 
the  mathematical  interpretation: 


Se{t) 

■  M  0  0  0- 

■ 

Sdt  (t) 

-i  i  000 

Srs  (S) 

Sf  (t) 

0  0  1^0 

Slf  (t) 

Sa(t) 

0  0  -i  1  0 

Srf  (t) 

.  Sr(t)  . 

0  0  0  0  1  _ 

.  Sr{t)  . 

The  stabilators  and  flaperons  can  be  controlled  symmetrically  or  asymmetrically.  The  first  row 
indicates  symmetric  application  of  the  stabilators  produces  the  conventional  'pitching  action  accom¬ 
plished  by  an  elevator.  The  second  row  indicates  asymmetric  application  of  the  stabilators  produces 
the  conventional  rolling  action  (with  adverse  yaw)  accomplished  by  a  differential  tail.  The  third  row 
indicates  symmetric  application  of  the  flaperons  produces  the  conventional  pitching  action  accom¬ 
plished  by  the  flaps^^.  The  fourth  row  indicates  asymmetric  application  of  the  flaperons  produces 


^^Note  that  the  “flaps”  mentioned  here  are  used  during  flight  for  maneuvers.  The  “leading  edge  flaps”  are  used 
during  landing  or  in  slow  maneuvers  and  are  not  considered  in  the  linearized  model.  To  include  the  “leading  edge 
flaps”  in  a  linearized  model,  the  aircraft  configuration  must  be  selected  as  “landing”,  as  defined  in  Table  3-1,  before 
linearization. 
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the  conventional  rolling  action  (with  adverse  yaw)  accomplished  by  the  ailerons.  The  fifth  row 
indicates  that  the  function  of  the  rudder  remains  unchanged. 


3, 4*2. 2  Input  Matrix.  The  input  matrix,  B  of  Equation  (3.3),  must  be  redefined  to 
accommodate  the  change  from  u  to  Ur^od  as  expressed  in  Equation  (3.7).  Notice  that  Equation  (3.7) 
is  of  the  form 


u  (i)  =  T  (t)  (3-8) 

The  expression  Bu(t)  found  in  Equation  (3.1)  must  be  maintained,  so  by  substitution  and  manip¬ 
ulation. 


Bu  (t)  •—  B  (Tu^ofi  (t))  —  (BT)  (t)  —  ^TYiod^mod  (^) 

Thus,  the  modified  input  matrix  (based  on  physical  control  surfaces),  B^^od)  is 


.(3.9) 


B^nod —  BT  — 


r  0 

0 

0 

0 

lx' 

1  •V'/ 

2^5. 

i 

2^6f 

i  Y' 

iZi 

1  /7f 
2^Sf 

Ws, 

hK 

0 

0 

0 

0 

2  ^Sdt 
Iff 

—-Nc 

L  2^^M 

ly' 

2^  Sdt 
Iff 

2^M 

L]\Tf 

2^%i 

_Iv' 

2-*^<5a 

Ir' 

""2^<5a 

-Ik 

kv' 

2^Sa 

0 

0 

0 

0 

0 

K 

m 


(3.10) 


-  .  -  _  -  -  - 

3,4^3  Actuator  Design  Model 

The  actuator  design  model  is  a  reduced  order  model  compared  to  the  truth  model.  Each 

actuator  truth  model  is  a  fourth  order  model,  expressed  as 

_ (20.2)(144.8)(71.4)^ _ 


Scmd{s)  (s  +  20.2)(s  +  144.8)(s2  +  2(0.736)(71.4)s  +  71.42) 
where  Scmd  is  the  commanded  actuator  position  and  6 act  is  the  actual  actuator  position.  In  order  to 

simplify  the  model,  a  first-order  model  is  chosen^^.  Classical  control  theory  might  place  the  break 

point  at  a;  =  20.2  however,  Eide  suggested  that  placing  the  break  point  at  cj  =  14  was  a 

better  fit  to  the  truth  model  within  the  bandwidth  of  interest  [10, 11].  To  be  consistent  with  results, 


this  research  will  also  use  a  first  order  lag  with  a  break  point  at  a;  =  14  expressed  as 

Sact  js)  ^  14 

Scmd  {s)  5  +  14 


(3.12) 


^^Research  has  shown  zero-order  models  for  actuators  drastically  degrade  performance  [35]. 


37 


The  design  model  of  the  actuators  in  state  space  form  is  then 

^act  (^)  “  14  '  isx5  *  ^act  (^)  “h  14  ’  IsxS  ’  ^cmd  (^) 


where 


I 

1 _ 

Srs  (t) 

^rScmd  (^) 

{*) 

and  ^cmd  (^)  — 

Slfomd  (^) 

6rf  (t) 

^rfomd  {^) 

.  Sr{t)  _ 

^r^md  (^) 

(3.13) 


(3.14) 


3. 4 >4  Augmented  System 

Now  that  a  reduced  order  actuator  model  is  defined,  the  actuator  states  must  be  augmented 
to  the  original  aircraft  system  state  vector.  Notice  that  the  definition  of  5 act  in  Equation  (3.14)  is 
the  same  as  that  of  Umod  in  Equation  (3.6).  Thus,  using  Equation  (3.9)  and  noting  5  act  —  ^TTirodj 
Equation  (3.1)  can  be  rewritten  as 

X  (t)  =  Ax  {t)  +Bmo<iU^od  (t)  +  Gw  {t) 

=  Ax{t)+BmodSact{t)  +  Gw{t)  (3.15) 

If  new  augmented  state  and  input  vectors  are  defined  as 


^aug(t^  — 


x(t) 

Sact  {t) 


,  lla.up(t)  —  [^cmd  (^)] 


then  Equations  (3.13)  and  (3.15)  could  be  augmented  as  follows: 

X  (t)  =  Ax  (t)  -{-  ^mod^ act  (^)  “b  0  '  ^cmd  (^) 


+  Gw  {t) 


Kct  (t)  =  Ox  (t)  -  14  •  15x5  •  Sact  {t)  +  14  •  15x5  '  Samd  {t)  +  Ow  (t) 


^aug{t)  — 


A  ^mod 

0  -14  I 


^aug 


(t)  + 


0 

14-1 


Ua«s(i)  + 


G 

0 


w(t) 


The  continuous-time  system  model  is  now  complete.  It  is  of  the  form 

^augit')  =  Aaug^aug{t)  “b  ^aug^aug  (t)  Ga^pW(t) 


(3.16) 


(3.17) 


where  the  augmented  state  and  input  vectors  are  defined  in  Ekjuation  (3.16)  and  the  augmented 


plant,  input,  and  noise  injection  matrices  are  defined  as 


(3.18) 

Having  the  complete,  continuous-time  design  model,  Section  3.4.5  now  seeks  an  equivalent,  discrete¬ 
time  model. 


Aaug  — 


A  ^mod 

0  -14  I 


^aug  — 


0 

14  I 


^aug  — 


G 

0 
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3,4»5  Equivalent^  Discrete- Time  Model 

Because  this  research  is  implemented  on  a  digital  flight  computer,  the  model  in  Equation  (3.17) 
cannot  be  used  directly.  Either  the  results  from  using  a  continuous-time  filter  based  on  the 
continuous-time  model  of  Equation  (3.17)  must  be  discretized  or  an  equivalent,  discrete-time  model 
must  be  used  to  synthesize  a  sample-data  filter.  Maybeck  [22]  has  shown  that  the  first  approach 
yields  only  an  approximation  to  the  optimal,  discrete-time  filter;  moreover,  the  first  method  is  more 
difficult  to  implement.  Thus,  an  equivalent  discrete-time  model  is  sought.  The  basic  concept  of 
such  a  model  is  that  it  should  generate  a  discrete-time  state  vector  output  that  is  indistinguish¬ 
able  from  the  result  of  putting  the  continuous-time  model’s  state  through  a  sampler  operating  at  a 
specified  sampling  rate. 

The  complete  development  of  the  following  equations  is  given  in  Maybeck  [22].  An  equivalent, 
discrete-time  model  is  of  the  form 

~  ^^augil'i)  "b  ^d—aug^aug(^i)  ^d—  aug{pi)  (3.19) 

such  that 

$  =  gAaupAT  (3.20) 

B  -  (  f 

^d—aug  —  I  / 

yjo 

where  AT  is  the  sample  period.  The  appropriate  discrete-time  white  noise,  w^-aug  j  has  the  statistics 
E{wditi)}  =  0 

J/-AT  ^ 

f  (3.22) 

0 

=  0,  tijttj 

3,4*^  Discrete- Time  Measurement  Model 

The  VISTA  r-16  digital  flight  computer  receives  data-sampled,  noise-corrupted  measurements 
at  a  sample  rate  of  64  Hz.  The  measurements  can  be  expressed  as 

z{ti)  =  liaug^augiti)  +  v(ti)  (3.23) 

where  z  is  the  measurement  vector,  Tiaug  is  measurement  matrix,  '^aug  is  the  augmented  state  vector, 
and  V  is  measurement  noise. 
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Measurement  Vector, 


Table  6.  Measurement  Vector  Description 


Symbol 


Description 


Units 


a 

Angle  of  Attack 

rad 

Q 

Pitch  Rate 

rad/sec 

Normal  Acceleration* 

g’s 

p 

Roll  Rate 

rad/ sec 

r 

Yaw  Rate 

rad/ sec 

ay 

Lateral  Acceleration* 

g’s 

*  measured  at  the  pilot’s  station 


The  measurement  vector,  z(ti),  defined  in  Equation  (3.23)  is  described  in  Table  6.  All  quan¬ 
tities  except  for  und  ay  are  available  as  states  from  the  system  model.  Bide  [10, 11]  and  Stepa- 
niak  [41,42]  found  linear  models  for  these  accelerations  (expressed  at  the  pilot’s  station): 

a„  =  -^{a-q)  +  ^fq  (3.24) 

9  9 

ay  =  ^/0  +  r^  —  ^4- (3.25) 

where  gravity  is  g  —  32.17'j|^and  is  the  distance  from  the  aircraft’s  center  of  gravity  to  the  pilot’s 
station  calculated  as 


=  9.988  +  0.01  -c-Xcg  (3.26) 

where  the  mean  aerodynamic  chord  is  c  =  11.32  /t  and  the  average  location  of  the  center  of  gravity 
from  the  origin  of  the  body  axes  in  the  x-axis  direction  (all  other  directions  are  assumed  negligible) 
is  Xcg  =  37.376  ft.  The  term  (j)  has  units  of  g’s;  it  is  derived  from  the  small  angle  approximation 
of  ^•sin(^),  where  the  gravity  term  is  divided  out  to  form  the  units  of  g’s.  When  the  linear  model 
for  as  expressed  in  Equation  (3.24)  was  compared  to  the  non-linear  truth  model,  it  provided  very 
satisfactory  results  [10,11,41,42].  However,  the  linear  model  for  ay  expressed  in  Equation  (3.25) 
compared  to  the  non-linear  truth  model  did  not  provide  satisfactory  results  [10, 11,41,42].  After 
further  analysis  by  Eide  and  Stepaniak,  the  non-linear  truth  model  was  replaced  with  a  linear  model. 
For  comparison  and  time  considerations,  this  research  effort  also  incorporates  the  linear  model  given 
by  Equation  (3.25)  as  the  truth  model  for  lateral  acceleration  at  the  pilot’s  station. 
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Measurement  Matrix,  Recalling  that  ]  5  "the  measurement 

matrix,  Haug  of  Equation  (3.23),  can  be  conveniently  expressed  as 


^aug  —  [  ^ 


(3.27) 


so  that 


^^aug'^dug  —  [  ] 


^act 


—  fix  ~f“  Y) 2:^ act 


(3.28) 


Thus,  Equations  (3.24)  and  (3.25)  can  be  expressed  in  the  form  of  Equation  (3.28)  by  defining 


H 


0 

0 

U  ryl 
"32.2"^^ 
0 

0 

0 


0 

0 

_ V_rv\ 

32. 2^^!^ 

0 

0 

0 


D.  = 


0 

0 

-*  (jzy 

0 

0 

L  AHn'J 


1 

0 

V  rvl 
32.2 
0 
0 
0 


0 

0 


V 

32.2 


0 

0 

0 

0 

0 

0 


0 

0 

0 

0 

0 

_e_y'  __  1 

32.2 ^ 


0 
0 
0 
0 
0 

V  V' 

R 


^3^2  (2 3^2(2^^/)  3^2  (2^^5/) 

0 


0 

0 


3^2  3^2  (  2^Sa) 


0 
0 

ay'  ^ 

32.2 


0 
0 
0 
1 
0 


0 

0 

0 

0 

1 


32.2  32.2  32.2  (n'-i)  J 
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0 

0 

0 

0 

0 


sfe  (K)  J 


(3.30) 


where  U  is  the  velocity  vector  at  trim. 


3. 4-6. 3  Measurement  Noise  Vector. 

Table  7.  Meetsurement  Noise  Covariance  Description 


R 

RMS  Noise 

Units 

R(l,l) 

a 

0.004 

rad 

R(2,2) 

Q 

0.006 

rad/sec 

R(3,3) 

CLn 

0.01 

g’s 

R(4,4) 

V 

0.02 

rad/sec 

R(5,5) 

r 

0.006 

rad/sec 

R(6,6) 

ay 

0.005 

g’s 

The  measurement  noise  vector,  v  (t ,) ,  as  defined  in  Equation  (3.23)  is  considered  discrete  white 
Gaussian  noise,  with  a  mean  of  zero  and  covariance  R  as  given  in  Table  7.  From  the  definition  of 
R,  it  can  be  seen  that  v  {pi)  is  a  6x1  vector  and  that  all  noises  are  assumed  uncorrelated.  Note  that 
the  table  presents  R  values  for  j  =  1, 2,  ■  •  •  ,6,  rather  than  R  (y,  j)  values. 
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3.4  •  Summary 

At  this  point,  the  discrete-time  system  and  measurement  design  model  is  complete.  From 
Equations  (3.19)  and  (3.23),  the  design  model  is  expressed  as 

Xa,up(^i4-l)  ~  ^^augi^i}  "h  ^d~~ aug^aug{pi)  ~^^d~-aug  {ti)  (3.31) 

Z{ti)  =  UaugXaug{ti)^v{ti)  (3.32) 

The  augmented  state  and  input  vectors,  and  u^ug,  are  defined  in  Equation  (3.16).  The  state 
transition  matrix,  is  found  through  Equation  (3.20)  using  Aaug  given  in  Equation  (3.18).  The 
discrete-time  input  matrix,  is  found  through  Equation  (3.21)  using  Aaug  and  Bang  given 

in  Equation  (3.18).  The  discrete-time  dynamics  driving  noise,  Wd-augiU)^  is  white,  Gaussian,  zero- 
mean,  and  with  strength  Qd-aug  found  through  Equation  (3.22)  using  Aaug  and  Gaug  given  in 
Equation  (3.18)  and  the  continuous-time  strength  Q  given  in  Table  4.  The  measurement  vector,  z, 
is  defined  in  Table  6.  The  measurement  matrix,  is  defined  in  Equation  (3.27),  where  H  is 

given  in  Equation  (3.29)  and  is  given  in  Equation  (3.30).  Finally,  the  discrete-time  measurement 
noise,  v,  is  white,  Gaussian,  zero-mean,  and  with  covariance  R  given  in  Table  7. 

3.5  Failure  Models 

In  order  to  apply  the  MMAE  architecture  to  failure  detection  and  estimation,  failures  must  be 
incorporated  into  the  truth  model  as  well  as  the  design  model.  It  is  convenient  to  express  failures 
in  terms  of  an  effectiveness  factor^  e,  with  a  range 

0  <  e  <  1  (3.33) 

An  effectiveness  of  0%  (e  =  0)  indicates  a  100%  failure,  or  a  “full  failure” .  Conversely,  an  effective¬ 
ness  of  100%,  (e  “  1),  indicates  a  0%  failure,  or  “no  failure”.  Effectiveness  values  0  <  e  <  1  indicate 
“partial  failures” . 

3.5.1  Truth  Model  Failures 

The  truth  model  must  be  modified  to  incorporate  failures.  For  the  truth  model,  it  is  desirable 
to  model  the  failure  as  it  would  occur  in  the  “real  world”  on  the  VISTA  F-16.  Due  to  the  lack  of  a 
complete  failure  modes  study,  the  research  done  in  this  area  can  only  speculate  what  might  occur. 
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For  sensor  failures,  the  nonlinear  truth  model  can  model  failures  in  various  ways.  Sensor 
failures  can  be  modeled  as  the  loss  of  the  desired  noise-free  signal  portion  of  the  sensor  reading  while 
still  admitting  sensor  noise  into  the  measurement.  This  is  the  approach  taken  for  the  truth  model 
used  in  this  research.  In  reality,  other  sensor  failures  that  may  occur  include  sensor  bias,  increased 
sensor  noise  levels,  or  changes  in  the  H  matrix. 

For  actuator  failures,  modeling  is  more  difficult.  Actuator  failures  are  modeled  by  multiplying 
the  commanded  actuator  position  by  6.  For  full  failures  (e  =  0),  the  appropriate  surface  would 
be  commanded  to  its  trim  position.  This  boundary  condition  is  desirable  because  it  approximates 
“failure  to  free  stream”.  For  no  failures  (e  =  1),  the  appropriate  surface  would  be  given  the  full 
command,  ensuring  consistency  during  normal  flight  conditions.  For  partial  failures  (0  <  e  <  1), 
scaling  the  command  by  e  results  in  the  effect  of  reduced  command  authority.  These  three  conditions 
are  modeled  in  the  truth  model  used  in  this  research  because  they  represent  the  characteristics  of 
a  failed  actuator  without  the  need  for  determining  the  effect  of  a  failed  surface  on  the  aerodynamic 
characteristics  of  the  aircraft.  If  time  permitted,  actuator  failures  could  be  more  accurately  modeled 
by  additionally  applying  changes  in  the  stability  derivatives,  effecting  the  A  matrix  in  addition 
to  the  B  and  H  matrices.  For  instance,  battle  damage  to  one  actuator  may  emulate  stability 
derivatives  representing  an  asymmetric  aircraft.  Other  failure  characteristics  not  modeled  may  also 
be  experienced,  such  as  stuck  actuators  (rather  than  failure  to  free  stream),  removal  of  portions  of  an 
actuator  (as  opposed  to  reduced  effectiveness  of  a  given  surface),  or  a  deterioration  in  the  actuator’s 
time  response. 

3.5.2  Design  Model  Failures 

In  the  linear  design  model,  Stepaniak  [41,42]  introduced  the  use  of  failure  matrices  Fai  and 
Fsj,  where  the  subscripts  a  and  s  indicate  an  actuator  or  sensor  failure,  respectively,  and  i  and  j 
indicate  the  index  of  the  actuator  or  sensor  failure,  respectively.  The  failure  matrices  Fai  and  Fsj 
are  identity  matrices  except  that  Fai{iJ)  =  e  if  the  actuator  has  failed  and  Fsj{j,j)  =  e  if  the 
sensor  has  failed. 
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For  actuator  failures,  the  failure  matrix,  is  inserted  into  the  continuous-time  system  model 
after  augmenting  the  actuator  states.  This  is  done  to  reflect  the  fact  that  the  truth  model  uses 
continuous-time  dynamics.  The  design  model  can  be  expressed  as 

^augif^  ~  -^aug^augifi^  "h  ^aug^ai^aug  (t)  -h  Ga,u5W(i)  (3.34) 

From  Equation  (3.34)  it  can  be  seen  that  a  single  actuator  failure  affects  a  single  column  of  the 
Bang  matrix.  Note  that  the  commanded  actuator  position  is  multiplied  by  e  and  that  full  failures 
(e  =  0)  are  treated  as  a  failure  to  “free  stream”.  Further,  to  obtain  an  implementable  failure  design 
model,  an  equivalent,  discrete-time  model  must  be  found.  The  only  change  is  in  Bd-aug^  where 
now  instead  of  Equation  (3.21),  Bd~-aug  Is  expressed  as 


Bd 


—  aug 


Bdug^ai 


(3.35) 


For  sensor  failures,  the  failure  matrix,  F^j,  is  inserted  into  the  sampled-data  measurement 


model  as 


z{ti)  =  FsjHaugy-iti)  +  y{ti)  (3.36) 

Equation  (3.36)  displays  the  fact  that  a  single  sensor  failure  affects  a  single  row  of  the  Haug  matrix. 
Thus,  sensor  failures  are  modelled  as  the  loss  of  information  while  still  admitting  sensor  noise  into 
the  measurement  vector.  Note  that  partial  sensor  failures  are  not  modelled  in  this  fashion;  that 
is,  the  effectiveness  factor  may  only  equal  zero  for  full  sensor  failures  or  one  for  no  sensor  failure. 
Although  this  research  effort  does  not  consider  partial  sensor  failures,  an  appropriate  partial  sensor 
failure  model  may  be  characterized  by  an  increase  in  the  sensor  noise. 


3.6  Control  Redistribution 

This  section  reviews  Stepaniak’s  [41,42]  development  of  Control  Redistribution  (CR).  CR 
was  developed  by  Stepaniak  to  be  used  in  conjunction  with  MMAE-based  control  when  it  became 
apparent  that  Multiple  Model  Adaptive  Control  (MMAC)  could  not  perform  sufBciently  due  to 
numerical  problems  with  the  LQ  synthesis  of  multiple  elemental  controllers  required  within  the 
MMAC.  The  remainder  of  this  section  presents  CR  in  Section  3.6.1,  details  its  application  to  full 
failures  and  no  failures  in  Section  3.6.2,  and  presents  a  new  modified  CR  scheme  used  to  handle 
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partial  failures  in  Section  3.6.3.  The  interested  reader  is  referred  to  Clark’s  thesis  [8]  for  a  detailed 
history  of  other  control  redistribution  efforts. 


3.6.1  CR  Algorithm  Development 

Control  Redistribution  (CR)  uses  the  inherent  redundancy  existing  in  an  aircraft’s  suite  of 
control  surfaces  to  restore  control  authority  if  an  impairment  to  a  control  surface  occurs.  CR 
is  ideally  suited  for  fly-by-wire  aircraft  in  which  a  flight  computer  determines  what  control  vector 
command  to  send  to  the  actuators.  For  instance,  the  VISTA  F-16  receives  longitudinal  input 
from  the  pilot  in  terms  of  C*,  a  scheduled  blending  of  pitch  rate  and  normal  acceleration  based  on 
dynamic  pressure  [36].  Based  on  the  commanded  C*  and  dynamic  pressure,  the  flight  computer 
determines  what  control  authority  to  issue  to  the  actuators.  If  an  actuator  is  impaired,  CR  allows  the 
flight  computer  to  redistribute  the  control  to  the  other  unimpaired  actuators  to  achieve  the  desired 
aircraft  behavior,  rather  than  relying  on  the  pilot  to  compensate  for  the  actuator  impairment.  If  an 
algorithm  has  detected  a  failure  and  estimated  its  extent,  the  pilot  can  issue  (7* commands  as  usual 
and  CR  will  compensate  for  the  surface  impairment  in  a  manner  that  is  transparent  to  the  pilot. 
Of  course,  implementation  could  provide  cockpit  displays  that  inform  the  pilot  of  failures. 

Mathematically,  the  aircraft  performance  before  and  after  a  control  surface  impairment  should 
be  equal: 

^before  —  ^after 


Ax-fBu  =  A/aiiX-f  (3-37) 

where  A  fail  and  B  fail  are  the  plant  and  input  matrices  after  the  failure,  respectively,  and  is  the 
redistributed  control  vector.  As  described  in  the  failure  truth  model  development  in  Section  3.5.1, 
the  plant  matrix  before  a  failure  and  the  plant  matrix  after  a  failure  are  assumed  to  be  approximately 
equal: 


Thus,  from  Equation  (3.37), 


Afail^  A 


BfailUr^  BU 


(3.38) 


(3.39) 
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must  be  satisfied.  Prom  Section  3.5.2,  the  input  matrix  after  a  failure  is  equal  to  the  input  matrfac 
before  a  failure  post-multiplied  by  the  failure  matrix,  F^i,  expressed  as 

Bfail=BFai  (3.40) 

The  redistributed  control  vector  can  be  defined  in  terms  of  the  original  control  vector  as 

u,  ^  (3.41) 

by  introducing  the  control  redistribution  matrix,  where  the  subscript  a  denotes  actuator  and 
the  subscript  i  indicates  the  actuator.  The  control  redistribution  matrix  must  be  computed 
on-line  or  known  a-priori.  By  substitution  and  manipulation,  an  expression  for  is  obtained^^: 


BjaifU,*  “  Bu 

(3.42) 

(BFai)  (DaiU)  =  Bu 

(3.43) 

BFaiDai  =  B 

(3.44) 

=  (BF,i)+B 

(3.45) 

where  u  is  known  and  eliminated  from  both  sides  of  Equation  (3.43)  and  the  superscript  +  in 
Equation  (3.45)  indicates  the  Moore-Penrose  [44]  pseudoinverse.  The  Moore-Penrose  pseudoinverse 
yields  a  true  inverse  if  BFai  is  full  rank,  shown  as 

Dai  =  B  =  (BF,0“'  B  =  F^,' 

In  the  case  where  BFai  is  rank  deficient,  the  Moore-Penrose  pseudoinverse  yields  the  best  solution 
in  the  least  squares  sense,  that  is,  the  error  ||BFa,iDai  —  B||  is  minimized  [44]. 


3.6.2  CR  Application 


To  apply  control  redistribution  to  the  VISTA  F-16,  the  control  redistribution  matrix,  Dai,  given 
in  Equation  (3.45)  must  be  explored,  considering  the  control  vector  actuators  given  in  Equation  (3.14) 


and  (3.16)  defined  in  Table  ??  and  given  the  following  indices: 


■  1  ■ 

c-rnd 

2 

^Ifcrrrd 

3 

^rfcmd 

4 

5r  ^ 

'  cmd 

5 

(3.46) 


The  approximation  symbol  fs  indicating  that  A  is  dropped. 
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For  the  fully  functional  case  (and  knowing  that  there  are  five  actuators  for  the  VISTA  F-16),  the 
failure  matrix  is  =  15^:5,  and  from  Equation  (3.45),  IsxS,  where  the  superscript  e  is  placed 

on  Dai  to  indicate  its  corresponding  effectiveness  value.  This  boundary  condition  is  intuitive;  CR 
simply  passes  u  as  when  no  failure  has  occurred.  For  the  fully  failed  case,  Dai  is  known  a-priori 

(for  the  VISTA  F-16),  Stepaniak  [41,42]  lists  Dai  for  a  fully  failed  left  stabilator  as 

0  0  0  0  0  " 

1  10  0  0 

=  0.9060  0  1  0  0  (3.47) 

-0.9060  0  0  1  0 

-0.7862  0  0  0  1 


(Recall  from  Equation  (3.41)  that  =  DaiU,  where  u  is  the  original  control  vector  and  u^.  is  the 
redistributed  control  vector.)  Looking  at  the  first  row  of  D^y^?  control  is  placed  on  the  failed 
left  stabilator.  Looking  at  the  remaining  rows  of  D^Y^j  control  for  the  unfailed  actuators  is  a 
combination  of  original  control.  Therefore,  Dai  redistributes  the  control  authority  from  the  failed 
actuator  to  the  unfailed  actuators  to  produce  an  equivalent  control  vector.  Although  equivalence 
was  proven  mathematically,  problems  can  arise  when  trying  to  implement  this  scheme  for  partial 
failures  (see  Section  3.6.3). 

Notice  the  form  of  D^f^  Equation  (3.47) .  The  only  information  in  the  Dai  matrix  is  the  i^^ 
column.  Thus,  a  compact  notation  can  be  used  to  incorporate  all  five  Dai  matrices  for  full  failures 


into  one  matrix.  Stepaniak  [41,42]  found  for  the  VISTA  F-16, 


0 

1 

1.1037 

-1.1037 

-1.2719 

1 

0 

-1.1037 

1.1037 

1.2719 

0.9060 

-0.9060 

0 

1 

1.1524 

-0.9060 

0.9060 

1 

0 

-1.1524 

-0.7862 

0.7862 

0.8678 

-0.8678 

0 

(3.48) 


Now,  any  of  the  five  D^Y^  matrices  can  be  formed  by  starting  with  the  identity  matrix  and  replac¬ 
ing  the  i^^  column  with  the  column  of  the  D^=^  matrix  given  in  Equation  (3.48).  This  compact 
notation  is  useful  because  it  reduces  data  storage  requirements  during  implementation.  It  is  impor¬ 
tant  to  notice  that  the  zeros  along  the  diagonal  cause  no  control  authority  to  be  issued  to  the  failed 
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actuator,  while  the  off-diagonal  terms  cause  the  control  authority  to  be  distributed  to  the  unfailed 
actuators. 

3.6.3  Modified  CR 

When  trying  to  implement  the  matrix  for  partial  failures,  problems  can  arise.  In  the 
partial  failure  case,  the  failure  matrix  Fai  is  full  rank.  Therefore,  the  true  inverse  exists  and 
can  be  expressed  as 

Kl  (3-49) 

Notice  this  holds  for  e  contained  within  the  range  (0, 1].  For  e  =  1,  1“^  =  I  and  no  problems  arise. 
However,  for  e  in  the  range  (0, 1),  Fai  is  the  identity  matrix,  except  the  diagonal  entry  is  equal 
to  e.  Thus,  from  Equation  (3.49),  ^  identity  matrix,  except  the  i^^  diagonal  entry  is 

equal  to  e"^  This  makes  sense  intuitively:  “If  the  i^^  actuator  is  only  e  effective,  increase  its  gain 
by  e“^.”  However,  this  result  is  unsatisfactory  because  it  results  in  actuator  saturation  and  rate 
limits  [8,41,42]  as  well  as  strong  commands  to  a  partially  failed  actuator. 

To  avoid  this  situation,  a  modified  Control  Redistribution  technique  is  used.  In  the  case  of 
partial  failures,  Equation  (3.45)  is  not  used;  rather,  the  following  approach  is  taken.  The  modified 
redistributed  control  vector  for  partial  failures  is  defined  as 

=  ^\e=l+  (1  -  eo)  Ur  1^=0  (3-50) 

where  Eq  is  the  effectiveness  value  of  the  actuator  undergoing  partial  failure  such  that  Cq  lies  in  the 

range  (0,1).  The  term  is  used  to  indicate  that  the  normal  control  vector  u  is  applied,  and 

it  is  anticipated  that  the  partially  failed  actuator  will  exhibit  a  response  as  if  multiplied  by  e  ”  Cq- 
The  first  term  in  Equation  (3.50)  applies  the  full  original  command  to  the  partially  failed  actuator; 
the  result  is  that  the  actuator  actually  produces  an  output  as  though  been  received, 

where  the  superscript  e  =  eo  on  Fai  indicates  a  failure  matrix  with  an  effectiveness  factor  of  e  ==  Cq. 
The  remaining  term  in  Equation  (3.50),  (1  —  eo)  Ur\e=z0  compensates  for  the  lost  effectiveness  in  the 
failed  actuator  by  redistributing  the  control  authority  lost  (1  —  eo)  to  the  other  actuators  through 
CR;  that  is,  u^|e=o  —  I^aT^^  ^  defined  in  Equation  (3.41). 
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To  find  an  equivalent  modified  redistribution  matrix,  the  control  given  by  Equa¬ 

tion  (3.50)  can  be  re-written  as 

^n^oa  =  u|^^i+(l-eo)u^|e=o  (3.51) 

=  u+(l-e)D|7”u  (3.52) 

=  (l+(l-e)D^f)u  (3.53) 

=  (3.54) 

Noticing  Equation  (3.53)  and  recalling  that  is  the  identity  matrix  with  the  column  replaced 
with  column  of  given  in  Equation  (3.48),  an  expression  for  Tiai^od  given  in  Equation  (3.54) 

can  be  written.  Expressed  in  compact  notation  defining  7  =  1  —  e, 

1  7  1.10377  -1.10377  -1-27197  ’ 

7  1  -1.10377  1.10377  1.27197 

^arnodb)  =  O.9O6O7  -O.9O6O7  1  7  1.15247  (3.55) 

-O.9O6O7  O.9O6O7  7  1  -1.15247 

-0.78627  0.78627  O.86787  -O.86787  1 

where  now  can  be  formed  by  taking  and  replacing  the  column  with  the  column 

given  by  (7)  in  Equation  (3.55). 

Using  (7)  does  increase  the  load  on  the  other  actuators;  however,  this  is  reasonable  be¬ 

cause  the  other  actuators  must  compensate  for  the  loss  of  control  authority  from  the  failed  actuator. 
The  advantage  is  “works”  the  unfailed  actuators  harder,  while  “works”  the  failed  actu¬ 

ator  harder.  For  example,  consider  a  left  stabilator  failure  with  an  effectiveness  of  10%  (e  =  0.1). 
The  resultant  u,.  is 

■  10  0  0  0  0  ■ 

0  10  0  0 

Ur=  OOlOOu 

0  0  0  1  0 

_  0  0  0  0  1  _ 

whereas  the  resultant  is 

1  0  0  0  0  ' 

0.9  10  0  0 

0.9060  (0.9)  =  0.8154  0  1  0  0  u 

-0.9060(0.9)  = -0.8154  0  0  1  0 

-0.7862  (0.9)  =  -0.7076  0  0  0  1 
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Notice  using  CR  simply  increases  the  gain  by  10  for  the  failed  actuator.  Using  modified  CR,  however, 
leaves  the  gain  the  same  for  the  failed  actuator,  but  increases  the  load  on  the  unfailed  actuators. 
Distributing  the  load  from  the  failed  actuator  to  the  unfailed  actuators  is  an  advantage  because 
working  a  partially  failed  actuator  harder  may  cause  a  further  decrease  in  its  effectiveness. 

When  using  the  modified  Control  Redistribution  approach,  caution  must  be  taken  in  two  areas. 
First,  the  entire  development  assumes  that  if  the  control  u  is  applied,  then  the  result  will  be  as  if 
multiplied  by  e  for  the  failed  actuator.  This  requires  that  the  estimate^^  of  e  is  accurate  so  that 
the  remaining  control  added  to  compensate  for  the  loss  is  appropriate.  If  the  estimate  of  e  is  too 
high,  the  failed  actuator  will  offer  less  control  authority  than  expected  and  not  enough  compensating 
control  will  be  added,  causing  the  aircraft  to  perform  sluggishly.  If  the  estimate  of  €  is  too  low,  the 
failed  actuator  will  offer  more  control  authority  than  expected  and  too  much  compensating  control 
will  be  added,  causing  the  aircraft  to  over-compensate  and  perhaps  causing  instabilities.  This  leads 
into  the  second  area  of  caution,  use  of  logic  to  enhance  performance  of  the  modified  CR  algorithm. 
Logic  should  be  incorporated  that  makes  decisions  based  on  the  value  of  the  estimated  e.  For 
example,  consider  the  condition  in  which  the  estimate  is  e  =  0.  Using  modified  CR,  the  original 
control  will  be  issued  to  the  failed  actuator  anticipating  that  the  response  of  the  failed  actuator  will 
be  zero.  Logic  should  incorporate  the  use  of  CR  rather  than  modified  CR  in  this  case,  so  that 
control  authority  is  not  issued  to  a  completely  failed  actuator.  Depending  on  the  application,  other 
regions  of  effectiveness  may  also  be  of  concern.  For  this  research  effort,  an  estimate  is  provided  to 
use  in  a  CR  or  modified  CR  technique.  A  systematic  approach  to  developing  the  logic  used  in  this 
research  will  be  explained  in  Section  5.6. 

5. 7  Conclusion 

This  chapter  covered  the  models  pertaining  to  this  research,  starting  with  the  “real  world” 
VISTA  F- 16  in  Section  3.2.  A  full  six-degree-of-freedom  truth  model  based  on  the  “real  world” 
VISTA  F-16  needed  to  validate  the  design  was  described  in  Section  3.3.  A  reduced  order  design 

^®For  this  research,  the  estimate  will  come  from  an  MMAE  algorithm. 


50 


model  needed  to  build  Kalman  filters  within  the  MMAE  was  developed  in  Section  3.4.  Failures 
were  incorporated  into  the  truth  model  as  well  as  the  design  model  in  Section  3.5.  Finally,  Control 
Redistribution  and  modified  Control  Redistribution  (needed  for  partial  failures)  were  described  in 
Section  3.6.  Having  the  necessary  models,  the  MMAE  architecture  will  be  described  in  the  following 
chapter. 
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Chapter  4  -  Filter  Spawning 


4*1  Chapter  Overview 

This  chapter  introduces  filter  spawning  as  a  technique  to  enhance  the  application  of  MMAE 
to  failure  detection  and  estimation.  In  Section  4.2,  the  filter  models  for  each  Kalman  filter  in 
the  MMAE  algorithm  will  be  reviewed.  In  Section  4.3,  filter  spawning  is  motivated  and  its  basic 
operation  is  outlined.  In  Section  4.4,  filter  spawning  implementation  is  discussed  as  it  is  applied  to 
this  research.  The  chapter  closes  with  a  brief  summary  in  Section  4.5. 

4*2  Filter  Models 

In  order  to  apply  the  Multiple  Model  Adaptive  Estimation  (MMAE)  algorithm,  Kalman  filters 
must  be  built  with  models  based  on  various  parameter  values.  For  this  research,  MMAE  is  applied 
to  the  detection  and  estimation  of  failures  of  sensors  and  actuators.  Therefore,  filters  must  be 
built,  each  hypothesizing  a  different  failure  condition.  Recall  in  Section  3.4  a  “design  model” 
was  constructed  and  in  Section  3.5  failures  were  incorporated  into  the  design  model  via  the  failure 
matrices,  and  F^j,  where  the  subscripts  a  and  s  denote  actuator  and  sensor  failures,  respectively, 
and  the  subscripts  i  and  j  denote  the  failure  index  of  the  actuator  and  sensor,  respectively.  The 
design  model  is  expressed  as 

^aug  (^i+l)  —  ^^aug  (^i)  “h  ^d—aug^aug  (ti)  +  Wd  ~aug  (ti)  (4.1) 

Z(ti)  =  FsjHaugXaug  (ti)  +  V  (ti)  (4.2) 

where  F^i  is  incorporated  into  the  definition  of  3ci-~aug,  aa  defined  in  Equation  (3.35). 

For  this  research,  the  conditions  of  no  failure,  complete  actuator  failures,  complete  sensor 
failures,  and  partial  actuator  failures  are  considered.  Thus,  a  model  for  each  case  must  be  formed 


Table  8.  Actuator  Indices 


Index,  i 

Actuator 

1 

Left  Stabilator 

2 

Right  Stabilator 

3 

Left  Flaperon 

4 

Right  Flaperon 

5 

Rudder 

based  on  Equations  (4.1)  and  (4.2).  The  no  failure  model  is  formed  using  Equation  (4.1),  where 
^d-aug  is  based  on  and  using  Equation  (4.2)  where  Fgj  =  The  actuator  failure 

models^  with  the  actuator  index  assignment  given  in  Table  8,  are  formed  using  Equation  (4.1), 
where  Bd-aug  is  based  on  Fai  =  Isxs  except  that  the  diagonal  term  is  replaced  with  zero,  and 
using  Equation  (4.2)  where  Fgj  =  le^e-  The  sensor  failure  models^  with  the  index  assignment 
given  in  Table  9,  are  formed  using  Equation  (4.1),  where  Bd~aug  is  based  on  =  IsarSj  and  using 
Equation  (4.2)  where  Fgj  =  l6a;6  except  that  the  diagonal  term  is  replaced  with  a  zero.  The 
partial  actuator  failure  models  are  formed  using  Equation  (4.1),  where  Bd-aug  is  based  on  F^i  =  IsrcS 
but  with  the  i^^  diagonal  term  replaced  with  the  effectiveness  value  e,  and  using  Equation  (4.2)  where 
Fsj  =  l6a:6*  (Recall  that  the  effectiveness,  e,  is  used  to  describe  the  extent  of  the  partial  failure;  lOOe 
’would  be  the  percent  effectiveness  and  ICX)  (1  —  e)  would  be  the  percent  failure.)  In  Section  4.4.1, 
these  models  will  be  used  to  form  the  MMAE  algorithm. 


Table  9.  Sensor  Indices 


IlMiJil 

Sensor 

1 

Angle  of  Attack  Sensor 

2 

Pitch  Rate  Sensor 

3 

Normal  Acceleration  Sensor 

4 

Roll  Rate  Sensor 

5 

Yaw  Rate  Sensor 

6 

Lateral  Acceleration  Sensor 

4^3  Filter  Spawning  Conceptualization 

Filter  spawning  is  the  method  used  in  this  research  to  enhance  the  estimation  of  the  effectiveness 
value  for  a  partial  actuator  failure.  Section  4.3.1  will  motivate  its  use  by  explaining  the  shortcoming 
of  prior  efforts.  Section  4.3.2  will  explain  how  filter  spawning  improves  estimation. 

4 >3.1  Filter  Spawning  Motivation 

Prior  research  has  explored  the  detection  and  estimation  of  partial  actuator  failures  without 
the  use  of  spawning.  One  method  used  was  to  blend  the  fully  functional  filter  and  the  complete 
failure  filter  to  obtain  an  estimate  of  the  effectiveness  value  [8].  Using  this  method,  the  failure  is 
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detected  using  the  maximum  a  posteriori  (MAP)  approach,  expressed  as 

^M^fAE  i^i)  i  {A^max  \pk  (ii)]}  (4.3) 

where  ^mm^ae  failure  estimate,  aj  is  the  hypothesized  failure  for  the  filter,  and  {ti)  is 

the  conditional  probability  for  the  filter  as  computed  in  Equation  (2.19).  In  words,  the  filter’s 
hypothesis  with  the  highest  conditional  probability  is  the  detected  failure.  If  the  filter  with  the 
highest  conditional  probability  corresponds  to  the  filter  hypothesizing  a  fully  functional  aircraft,  then 
no  failure  is  detected.  If  the  filter  with  the  highest  conditional  probability  corresponds  to  a  filter 
hypothesizing  a  sensor  failure,  then  the  detected  failure  is  a  complete^ ^  sensor  failure.  If,  however, 
the  filter  with  the  highest  conditional  probability  corresponds  to  a  filter  hypothesizing  an  actuator 
failure,  then  the  algorithm  declares  a  detected  actuator  failure  and  attempts  to  estimate  the  extent 
of  the  failure  (in  terms  of  effectiveness) . 

The  actuator  failure  is  estimated  using  a  Bayesian  blending  approach  using  the  MMAE- 


computed  hypothesis  conditional  probabilities,  expressed  as 

where  e  is  the  effectiveness  estimate,  ei  is  the  effectiveness  hypothesized  by  the  fully  functional  filter 


(ei  =  1),  j  is  index  of  the  filter  with  the  highest  conditional  probability  as  defined  in  Equation  (4.3) 
(which  corresponds  to  an  actuator),  tj  is  the  effectiveness  hypothesized  by  the  filter  (and  because 
only  complete  actuator  failures  are  modelled,  Cj  =  0),  and  pj  is  the  conditional  probability  of  the 
filter.  The  denominator  term  corrects  the  fact  that  pi  and  pj  do  not  sum  to  one  (recall  that  the 
sum  of  all  the  conditional  probabilities  is  one).  Noting  the  values  of  ei  and  e^,  Equation  (4.4)  can 


be  easily  implemented  in  the  form 


e(ti)  = 


While  this  method  is  easy  to  implement,  it  yielded  only  marginal  results  [8]  because  Equa¬ 
tion  (4.4)  depends  on  the  probabilities  flowing  in  proportion  to  the  effectiveness.  For  example,  if  the 
true  effectiveness  was  75%,  one  might  anticipate  pi  =  0.75  and  pj  =  0.25;  however,  this  was  not  the 


^^Recall  that  for  sensor  failures,  only  complete  failures  are  considered. 


54 


case.  Because  the  two  models’  hypothesized  efTectiveness  values  were  crudely  discretized  (the  space 
[0, 1]  was  discretized  with  points  0  and  1),  the  probability  tended  to  flow  to  the  one  Alter  with  the 
hypothesis  closest  in  the  Bar  am  distance  sense.  An  accurate  blended  estimate  of  the  effectiveness 
value  could  not  be  found  consistently,  resulting  in  an  erroneous  algorithm-indicated  effectiveness 
estimate.  When  the  hierarchical  structure  of  Section  2.3.4  brought  in  a  new  bank  of  filters  based 
upon  this  erroneous  effectiveness  estimate,  none  of  the  filters  in  the  bank  had  a  very  good  model  of 
the  real  world,  and  all  subsequent  failure  detection  performance  suffered  substantially. 

4^S*2  Spawning  Filters  to  Obtain  an  Estimate 

To  resolve  the  discretization  problem  when  estimating  the  extent  of  an  actuator  failure,  filter 
spawning  incorporates  additional  filters  (based  on  various  levels  of  effectiveness)  to  the  MMAE  bank. 
In  the  “filter  spawning  technique” ,  the  detection  of  a  failure  is  accomplished  in  the  same  fashion  as 
the  previous  method,  using  the  MAP  estimate  as  defined  in  Equation  (4.3).  Again,  if  the  filter 
corresponds  to  the  fully  functional  aircraft  filter^^,  then  no  failure  is  declared  (where  j  is  defined  in 
Equation  (4.3)).  If  the  filter  corresponds  to  a  sensor  failure  filter,  then  a  complete  sensor  failure 
is  declared  (where  all  sensor  failures  are  modelled  as  complete  failures).  If  the  filter  corresponds 
to  an  actuator  failure  filter,  then  the  algorithm  declares  a  detected  actuator  failure. 

After  a  failure  is  detected^  filter  spawning  is  used  to  enhance  estimation.  Additional  filters, 
called  spawned  filters,  are  included  into  the  MMAE  bank.  Thus,  spawning  provides  for  finer 
parameter  discretization  among  hypothesized  filters  to  yield  better  parameter  estimation,  but  only 
in  the  channel  corresponding  to  the  detected  actuator  failure,  so  as  not  to  require  an  overwhelming 
number  of  elemental  filters  to  be  running  in  parallel  at  any  one  time.  Each  spawned  filter’s  model 
is  based  on  the  actuator  failure  detected  with  different  effectiveness  value  in  the  region  e  =  (0, 1). 
Having  increased  the  number  of  discretization  points  over  the  space  e  €  [0,1],  the  filter  spawning 
technique  estimates  the  effectiveness  using  the  Bayesian  blending  approach,  expressed  as 

^®For  convenience,  the  filter’s  hypothesis  is  used  as  a  desciptor  for  the  filter,  i.e.,  the  “fully  functional  aircraft 
filter”  is  the  filter  hypothesizing  a  fully  functional  aircraft.  Likewise,  “sensor  failure  filter”  and  “actuator  failure 
filter”  will  be  used. 
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(4.6) 


^{u) 


[^k  '  Pk{^i)] 

kGK _ 

Vk{pi) 

fcG/C 


where  e  is  the  effectiveness  estimate,  is  the  effectiveness  hypothesized  by  the  filter,  is  the 
conditional  probability  of  the  filter,  and  K  contains  the  indices  to  the  fully  functional  filter,  the 
complete  actuator  failure  filter  (i.e,,  j),  and  the  spawned  filters.  The  denominator  term  corrects 
the  fact  that  sum  of  these  particular  p^’s  do  not  sum  to  one. 

The  filter  spawning  technique  improves  the  effectiveness  estimate  in  two  ways.  First,  because 
there  are  partial  failure  hypotheses,  filter  spawning  does  not  depend  completely  on  blending  to 
provide  an  estimate  of  the  effectiveness.  That  is,  one  could  spawn  filters  based  on  effectiveness 
values  of  interest  to  obtain  an  estimate  of  effectiveness  without  blending,  as  by  the  MAP  method 
used  by  Equation  (4.3)  in  detection.  Second,  blending  can  be  applied  because  the  probabilities 
are  more  evenly  distributed.  Probabilities  are  more  evenly  distributed  because  the  hypotheses  are 
“closer”  together  using  the  finer  discretization,  i.e.,  the  space  [0, 1]  is  discretized  with  points  at  0,  1, 
and  the  e  values  hypothesized  by  the  spawned  filters  rather  than  just  0  and  1. 

4*4  Filter  Spawning  Implementation 

This  section  presents  MMAE  with  Filter  Spawning  in  detail  sufficient  for  the  reader  to  duplicate 
its  use  (as  it  is  used  in  this  research) .  MMAE  with  Filter  Spawning  is  accomplished  borrowing  the 
hierarchical  structure,  described  in  Section  2.3.4.  It  is  important  to  note  this  is  not  necessarily  the 
most  efficient  implementation;  rather,  the  hierarchical  structure  was  chosen  for  time  considerations 
because  it  is  easier  to  implement  than  a  more  generic  moving-bank  structure  [5, 14, 16, 19,20,25,47]. 
Furthermore,  while  filter  spawning  is  ideally  suited  to  MMAE  algorithms  that  can  expand  and  con¬ 
tract  the  bank  of  parameter  values  upon  which  elemental  filters  are  based,  efficient  implementation 
involves  dynamic  memory  allocation.  However,  application  using  dynamic  memory  allocation  is  left 
for  future  consideration,  whether  or  not  the  hierarchical  structure  is  employed. 
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The  flow  chart  for  the  MMAE  with  Filter  Spawning  algorithm  used  in  this  research  is  shown  in 
Figure  6.  In  Section  4.4.1,  the  initialization  block  is  discussed.  Following  initialization,  the  “Con¬ 
ventional  MMAE  Computation”  group  performs  computation  standard  to  all  MMAE  algorithms,  as 
discussed  in  Section  4.4.2.  To  apply  MMAE  to  the  task  of  this  research,  logic  that  performs  “Fail¬ 
ure  Detection,  Estimation,  and  Control”  is  discussed  in  Section  4.4.3.  To  complete  the  flow  chart, 
the  “Bank  Swapping”  group  is  discussed  in  Section  4.4.4. 

4  •4*^  Initialization 

The  “Initialize”  block  involves  two  steps.  The  models  and  banks  used  by  the  MMAE  algorithm 
must  be  placed  into  memory,  and  initial  conditions  must  be  specified. 

4>4^^*^  Bank  Definition,  The  algorithm  uses  one  bank  consisting  of  12  Alters  as  well  as 
five  additional  banks  consisting  of  15  filters  each,  as  described  in  Table  10.  Each  bank  contains  the 
fully  functional  Alter,  the  complete  actuator  failure  Alters,  and  the  complete  sensor  failure  Alters.  In 
addition,  Banks  #2  through  ^6  contain  three^®  spawned  Alters,  each  at  a  different  effectiveness  level. 
Notice  the  set  of  spawned  Alters  for  each  of  the  flve  spawning  banks  is  based  on  a  different  actuator 
failure.  Each  spawned  Alter  is  based  on  an  effectiveness  level  ,  where  ia  is  the  actuator  index 
and  is  is  the  effectiveness  level  index.  Since  the  flrst  12  Alters  are  the  same  in  Banks  #2  through 
#6,  changing  banks  is  actually  the  method  used  to  decide  which  spawned  Alters,  if  any,  will  be  used. 

Bank  #1,  in  Table  10,  clarifles  how  the  MMAE  works  conceptually.  The  algorithm  as  imple¬ 
mented  for  this  research  only  uses  Banks  #2  through  #6,  and  all  15  Alters  are  always  used  in  the 
“Conventional  MMAE  Computations” .  However,  if  an  actuator  has  not  been  declared  failed,  then 
only  the  flrst  12  Alters  really  need  to  be  used  in  the  “Conventional  MMAE  Computations” .  This 
is  similar  to  using  Bank  #1,  except  that  additional  computational  loading  is  incurred  during  the 
“Conventional  MMAE  Computations” .  Further,  this  avoids  banks  that  change  the  number  of  ele¬ 
mental  Alters  running  in  parallel,  as  would  be  the  case  in  going  from  Bank  :^1  to  any  other  bank. 

Three  spawned  filters  were  chosen  as  a  first-cut  discretization.  More  filters  results  in  finer  discretization  which 
provides  a  better  estimate,  bnt,  tbe  computational  load  is  increased. 
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S'wapping  Failure  Detection,  Estimation,  and  Control  Convent! onalMMAE  Computation 
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Figure  6.  MMAE  with  Filter  Spawning  Flow  Chart 
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Table  10.  MMAE  With  Filter  Spawning  Bank  Description 


Bank 


1 

2 

3 

4 

5 

6 

FF 

1 

FF 

FF 

FF 

FF 

FF 

FF 

2 

LS 

LS 

LS 

LS 

LS 

LS 

Complete 

3 

RS 

RS 

RS 

RS 

RS 

RS 

Actuator 

4 

LF 

LF 

LF 

LF 

LF 

LF 

F 

Failure 

5 

RF 

RF 

RF 

RF 

RF 

RF 

i 

6 

R 

R 

R 

R 

R 

R 

1 

7 

AA 

AA 

AA 

AA 

AA 

AA 

t 

Complete 

8 

PR 

PR 

PR 

PR 

PR 

PR 

e 

Sensor 

9 

NA 

NA 

NA 

NA 

NA 

NA 

r 

Failure 

MSB 

RR 

RR 

RR 

RR 

RR 

RR 

11 

YR 

YR 

YR 

YR 

YR 

YR 

12 

LA 

LA 

LA 

LA 

LA 

LA 

13 

LSe=e2i 

RSe=:€3i 

LFe=e4i 

RF  e=e5i 

Re=e6i 

Spawned 

14 

LSg==e22 

RSe=e32 

LFe=e42 

RRe=e52 

Re=e62 

15 

11^1 

LSe=e23 

RSg=e33 

LFe=e43 

RF  £=663 

Re=e63 

FullyFunctional  (FF) 
Left  Flaperon  (LF) 
Angle  of  Attack  (AA) 
Roll  Rate  (RR) 


Left  Stabilator  (LS) 
Right  Flaperon  (RF) 
Pitch  Rate  (PR) 
Yaw  Rate  (YR) 


Right  Stabilator  (RS) 
Rudder  (R) 

Normal  Acceleration  (NA) 
Lateral  Acceleration  (LA) 


The  alternate  to  using  Bank  #1  to  exclude  the  spawned  filters,  as  implemented  in  this  research,  is 
discussed  in  Section  4.4.2. 

Recall  that  Section  3.5  detailed  how  each  model  is  built.  Each  unique  4>,  Bd-aug  s-iid  -Haup 
matrix  must  be  stored  in  memory.  Although  Table  10  lists  15  •  5  =  75  filters,  the  numbers  of  unique 
matrices  are 


^13a;13  (®d— aiip)! 

{Fsj  •  Baug)7^-\:^ 

1  1+5+15  =  21 

1  +  6  =  7 

Because  it  was  assumed  that  A  fail  A,  all  filters  share  the  same  4>  matrix.  Because  a  different 

matrix  for  each  actuator  hypothesis  is  used  to  formulate  "Bd-aug  in  Equation  (3.35),  there  are  21 
unique  Bd-aug  matrices:  one  fully  functional  (shared  by  the  sensor  failure  models)  plus  five  -  one  for 
each  of  the  five  complete  actuator  failure  models,  and  an  additional  15  -  one  for  each  of  the  spawned 
filters  for  partial  actuator  failures.  Because  a  different  Fsj  matrix  for  each  sensor  failure  hypothesis 
is  used,  there  are  seven  unique  Fsj  •  H^up  matrices:  one  fully  functional  (shared  by  the  complete 
and  partial  actuator  failure  models)  and  six  more  to  handle  each  of  the  six  sensor  failure  models. 
Notice  the  only  additional  load  due  to  the  spawned  filters  is  15  Bd-aug  matrices  of  dimension  13a;5. 
Further,  the  seven  Fgj  *  Bang  matrices  can  be  implemented  using  one  Baug^  where  the  row  is 
zeroed  on-line  to  perform  the  function  of  Fsj .  The  noise  strengths  and  R,  as  defined  in  Table  4 
and  Table  7,  respectively,  are  also  stored  in  memory.  Finally,  if  control  redistribution  is  used,  then 
the  packed,  modified  control  redistribution  matrix,  (7),  must  also  be  stored,  where  (7) 

is  the  5x5  matrix  defined  in  Equation  (3.55). 

Conditions.  Initial  conditions  must  be  defined.  The  state  vector  esti¬ 
mate  is  initialized  with  trim  condition  values.  Because  MMAE  uses  only  one  bank  at  a  time,  a 
bank  number  must  be  specified.  As  an  arbitrary  choice,  the  MMAE  starts  in  “Bank  #2”,  or  ex¬ 
pressed  as  a  function  of  time,  “Bank  h  (ti)”,  where  h  (to)  =  2.  Initial  conditional  probabilities  must 
also  be  defined.  The  aircraft  is  assumed  initially  fully  functional,  where  each  failure  filter’s  condi¬ 
tional  probability  will  be  equal  to  the  lower  bound  0.001  and  the  fully  functional  filter’s  conditional 
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probability  is  assigned  such  that  the  sum  of  the  probabilities  equals  one.  Thus, 

=  0.001  for  2<fc<15 

Pi  (to)  =  1- (14 -0.001)  =0.986 

J^.Ji.,2  Conventional  MMAE  Computation 

The  “Conventional  MMAE  Computation”  group  performs  the  computations  discussed  in  Sec¬ 
tion  2.3.2.  Specifically,  each  elemental  filter  is  propagated  by  Equations  (2.11)  and  (2.12),  repeated 
here  as 


=  (tf )  +  Bd_  a„3u(ti ) 

(4.7) 

Each  elemental  filter  is  updated  by  Equations  (2.13)  through  (2.17),  repeated  here  as 

(4.8) 

Afc(ti)  = 

^sjk^aug^k{ti  )^'^ug^'sjk  +  P- 

(4.9) 

Kk{ti)  = 

(4.10) 

^k(^i)  ~ 

Zi  —  Esj^^aug^augk{ti  ) 

(4.11) 

Xoupn.  {tf  )  = 

)  "b  ^^k{ti)T^k(ti) 

(4.12) 

Pkitf)  = 

)  “  ^k{^i)^sjk^O'Ug^k{ti  ) 

(4.13) 

The  system  matrices  4>,Bd-a‘up,Fsj^,  and  are  based  on  the  current  bank.  Bank  6(ti),  and 

the  noise  strengths  and  R  are  stored  in  memory.  The  subscript  k  was  dropped  from  matrices 
independent  of  the  particular  elemental  filter,  where  the  dependance  of  the  matrices  on  was 
described  in  Section  4.4.1. 

From  Section  2.3.2,  the  conditional  probabilities,  Pfc  (^i)>  are  expressed  in  Equation  (2.18), 
repeated  here  as 


Vk{ti)  =  Prob{a.  =  aik\2{ti)  =  Zi) 


(4.14) 


The  probabilities  can  be  computed  as  [23]  using  Equation  (2.19),  repeated  here  as 

V,  X  /z(ti)|a,2:(ti-i)(zi|afc,.Zi_i)pfc(ti_i) 

PkiU)  —  X  X  /  I  ■7  \  Cx  \ 


(4.15) 
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where,  from  Equations  (2.21)  and  (2.22) 


MU)  =  ,,  ,,,1  „,|i  (4.17) 

(27r)  2  |Afc(ti)p 

To  complete  the  conditional  probability  calculation,  a  probability  lower  bound  of  0.001  is  applied, 
as  discussed  in  Section  2.4.1.  The  state  vector  estimate  is  obtained  using  the  Bayesian  blending 
method,  expressed  as 

^Baysian —  )Vk{pi)  /  .  .  qn 

where  B  contains  all  k  such  that  Pk{U)  >  0.005,  as  defined  earlier  in  Equation  (2.24)  in  Section  2.3.2. 3, 
but  with  a  blending  lower  bound  of  0.005  applied  as  discussed  in  Section  2.4.1.  The  measurement 
vector,  z  (ti),  is  reconstructed  to  reflect  the  state  estimate  [41,42],  expressed  as 

^Baysian  /.  \  _  -rx  ^Baysian (a  i  q\ 

where  ^  denotes  the  measurement  vector  is  based  on  a  state  vector  estimate  from  an 

MMAE  algorithm  using  Bayesian  blending.  The  measurement  vector  estimate,  ^ 

to  replace  the  raw  measurement  z  {ti)  as  an  input  to  the  Block  40  ECS,  thereby  allowing  for  normal 
operation  despite  sensor  failures.  The  Block  40  FCS  then  produces  a  control  vector, 
where  again,  ^  denotes  the  control  vector  is  based  on  a  measurement  vector  using  a  state 

vector  estimate  from  an  MMAE  algorithm  using  Bayesian  blending. 


4*4*^  Failure  Detection,  Estimation,  and  Control 

The  “Failure  Detection,  Estimation,  and  Control”  group  in  Figure  6  applies  MMAE  to  failure 
detection  (using  the  conditional  probabilities  from  models  based  on  hypothesized  failures).  This 
group  occurs  in  three  stages:  detection,  estimation,  and  control.  Failure  detection  uses  a  maximum 
a  posteriori  (MAP)  approach.  Estimation  uses  a  Bayesian  blending  approach.  Control  is  applied 
through  MMAE  with  Control  Redistribution. 


4,4.3,!  Detection.  Before  detection  can  occur,  the  probabilities  must  be  redefined  to 
assure  a  proper  comparison.  Specifically,  consider  the  actuator  failure  on  which  the  spawned  filters 
are  based,  with  an  actuator  index  of  ia  =  h.  The  conditional  probability  that  the  actuator  has 
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failed  is  dispersed  among  the  complete  actuator  failure  filter  and  the  spawned  filters  modeling 
partial  failures  of  that  actuator.  As  a  remedy,  the  conditional  probability  of  the  actuator  filter 
is  redefined: 

Pia  i^i)  =  Pi^  +Pl3  (*i)  +Pl4  (*0  +Pl5  (*«)  (4-20) 

where,  from  Table  10,  ia  is  the  filter  index  for  the  complete  actuator  failure  and  13  through  15 
are  the  filter  indices  for  the  spawned  filters.  Thus,  the  sum  of  the  conditional  probabilities  for 
the  filters  based  on  the  actuator  for  any  efiectiveness  will  be  compared  to  the  remaining  filter’s 
conditional  probabilities.  A  more  rigorous  comparison  would  be  to  re-compute  the  conditional 
probabilities  using  Equation  (2.19)  without  considering  the  spawned  filters  (by  using  Bank  #1  in 
the  “Conventional  MMAE  Computations”).  While  the  formulation  in  Equation  (4.20)  is  not  as 
strict  as  re-computing  the  conditional  probabilities  without  the  spawned  filters,  the  formulation  in 
Equation  (4.20)  demonstrates  successful  results  and  saves  computation  time. 

A  failure  is  detected  if  the  highest  conditional  probability  exceeds  some  threshold,  expressed  as 

I  <k<  12max  [p^  (ti)]  ^  '^threshold  (4-21) 

where  (t^)  denotes  for  k  =  ia  the  conditional  probability  (ti)  is  defined  in  Equation  (4.20)  and 
for  k^ia  the  conditional  probabilities  are  defined  in  Equation  (4.15).  The  threshold,  V threshold)  for 
this  research  is  0.9;  a  lower  threshold  would  detect  failures  faster  but  also  increase  false  alarms  [10, 
11,31,32]. 

Equation  (4-21)  answers  the  question,  ^^Has  a  failure  occurred?” 

•  If  no  conditional  probability  exceeds  this  level,  then  no  failure  is  assumed  to 
have  occurred  and  the  failure  declaration  remains  at  the  previous  declaration,  i.e., 

^MAP  (f\_^MAP  (f,  \ 

^MMAE  —  ^MMAE 

•  If  a  conditional  probability  does  exceed  this  level,  the  failure  dictated  by 
Equation  (4.22)  below  is  declared  to  have  occurred. 

The  failure  is  detected  using  a  maximum  a  posteriori  (MAP)  approach,  as  defined  in  Equa¬ 
tion  (2.27),  expressed  as 

^mHae  {ti)  -  {*i)  where  J  =  arg  {1  <  A:  <  12inax  [p^  (ti)]}  (4.22) 
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where  ^MtfAE  ^  failure  estimate  and  is  the  hypothesized  failure  for  the  filter.  The  term 
p'j^{ti)  is  the  conditional  probability  for  the  filter,  and  for  k  —  ia,  the  conditional  probability 
(ti)  is  used  as  defined  in  Equation  (4.20), 

Equation  (J^.22)  answers  the  question^  ^What  failure  has  occurred?” 

•  If  j  =  1  in  Equation  (4.22),  then  ^mHae  (^0  corresponds  to  a  fully  functional 
aircraft  occurring. 

•  If  7  <  y  <  12,  then  ^m^ae  i^i)  corresponds  to  a  sensor  failure  occurring. 

•  Otherwise,  i.e.,  2  <  j  <  6,  ^m^Tae  (^0  corresponds  to  an  actuator  failure  occurring. 

Estimation.  After  detecting  a  failure,  the  extent  of  the  failure  is  estimated  in  terms 
of  effectiveness.  For  this  research,  only  complete  sensor  failures  are  considered,  while  complete  and 
partial  actuator  failures  are  considered.  As  a  result,  estimating  the  effectiveness  for  a  sensor  is 
accomplished  using  implicit  estimation;  that  is,  a  separate  estimation  algorithm  is  not  required 
because  the  only  hypothesized  effectiveness  is  e  =  0.  Therefore,  for  detected  sensor  failures,  the 
effectiveness  estimate  is  e  =  0.  On  the  other  hand,  actuator  failures  have  more  than  one  effectiveness 
hypothesized  (through  the  use  of  filter  spawning),  requiring  explicit  estimation^  meaning  estimation 
must  be  accomplished  separate  from,  and  subsequent  to,  detection. 

The  explicit  estimation  action  is  shown  on  the  flow  chart  in  Figure  6  as  the  block,  “Determine 
Effectiveness” .  Recall  that  Alter  spawning  is  used  to  enhance  estimation,  resulting  in  the  addition  of 
hypothesized  effectiveness  values^^  for  is  =  1, 2, 3.  Given  that  the  failure  index  is  j,  as  defined 
in  Equation  (4,22),  then  the  actuator  index,  ia,  is  ia  =  j  using  the  index  definitions  in  Table  10. 
The  hypothesized  effectiveness  values  are  then 

Cjo  —  0,  eji,  6^2,  Cff  =  1  (4.23) 

where  e^o  indicates  the  complete  actuator  failure  filter’s  hypothesized  effectiveness  value;  eji,ej2j 
and  Cjs  indicate  the  spawned  Alters’  hypothesized  effectiveness  values;  and  e//  indicates  the  fully 
functional  filter’s  hypothesized  effectiveness  value  of  one. 

the  current  spawned  iGllters  do  not  correspond  to  the  currently  declared  actuator  failure,  then  the  algorithm 
must  delay  using  the  spawned  filters  until  the  new  ones  are  brought  on-line.  Because  of  the  bank  swapping  logic  used 
in  Section  4.4.4,  this  is  usually  not  the  case. 
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The  effectiveness  is  estimated  using  the  Bayesian  blending  approach  using  Equation  (4.6). 

Using  the  effectiveness  values  in  Equation  (4.23),  Equation  (4,6)  can  be  expressed  as 

Z(t  )  -  ^jiPi3(^i)  +  ^j2Pu{ti)  +  ejspisiU)  .^  24) 

^  Vj{U)  -^PisiU)  +Pu{U)  -^Pis{U)  -\-Pi{U) 
where  e  is  the  effectiveness  estimate. 

Equation  (4^24)  answers  the  question^  what  extent  has  an  actuator  failure  occurred?”  The 
failure  is  assumed  to  have  occurred  to  the  extent  dictated  by  the  effectiveness  estimate,  e(ti),  as 
computed  in  Equation  (4.24). 

4.4. 3. 3  Control.  Recall  that,  in  the  “Conventional  MMAE  Computation”  group,  the  input 
vector  was  computed  by  the  Block  40  FCS.  Recall  from  Section  3.6  that,  if  an  actuator  has  failed. 
Control  Redistribution  is  used  to  redistribute  control  away  from  the  failed  actuator  to  the  unfailed 
actuators.  The  redistributed  control  vector, iv,  is  defined  in  Equation  (3.41)  as 

Ur  {ti)  =  -D,inlZAr{ti)  (4-25) 

where,  repeated  from  Equation  (3.45), 

Dai  =  (BFai)+B  (4.26) 

and  u^Z^^r  was  generated  by  the  Block  40  FCS  based  on  an  input  of  z^Zae  (*<)•  The 
redistribution  matrix  is  pre-computed  for  this  application,  as  defined  in  Equation  (3.48),  and  is 
stored  in  memory  during  initialization.  Further,  if  a  true  inverse  exists  for  (BF^i)'^,  as  in  partial 
failures,  modified  Control  Redistribution  is  used,  defined  in  Equation  (3.50)  as 

^mod  -  u|^^i-l-(l  ’“eo)llr|e=0  (4.27) 

where  the  effectiveness  estimate,  e,  defined  in  Equation  (4.24)  can  be  used  as  the  needed  eo.  Rather 
than  use  e  directly,  Chapter  5  will  refine  the  effectiveness  estimate  using  the  empirically  observed 
relationship  between  the  estimate  of  the  effectiveness  and  the  true  effectiveness.  Section  5.6  will 
present  the  decision  to  use  such  refined  parameter  estimates  for  both  conventional  Control  Redistri¬ 
bution  (for  complete  failures)  and  modified  Control  Redistribution  (for  partial  failures). 
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Bank  Swapping 

Due  to  the  hierarchical  structure  of  the  chosen  implementation,  changing  the  spawned  filters 
requires  bank  swapping^  shown  in  the  “Bank  Swapping”  group  in  Figure  6.  Bank  swapping  changes 
the  bank  number  on  which  the  MMAE  algorithm’s  filter  models  are  based.  (Recall  that  the  “Con¬ 
ventional  MMAE  Computation”  group  depended  on  the  current  bank  number.)  This  section  details 
the  bank  number  calculation  and  conditional  probability  treatment  during  the  bank  change. 

Bank  Calculation,  The  index  corresponding  to  the  actuator  filter  with  highest 
probability  at  time  ti  is  used  to  decide  which  bank  will  be  used  at  the  next  time  step,  ti^i .  Thus, 
the  bank  number,  6,  at  time  ti^i  is  expressed  as 

b  (ti+i)  =  arg  {2  <  A:  <  6max  (ti)]}  (4.28) 

where  (ti)  denotes  the  conditional  probability  p (ti)  as  defined  in  Equation  (4.20)  for  k  =  ia,  and 
the  conditional  probabilities  as  defined  in  Equation  (4.15)  for  k  /  v-  Notice  that  the  maximum 
is  taken  over  the  indices  corresponding  to  the  actuators.  Now,  the  spawned  filters  in  the  MMAE 
bank  used  at  the  next  time  step.  Bank  6(ti+i),  will  correspond  to  the  actuator  with  the  highest 
probability  at  the  current  time  step. 

Equation  (4-^^)  answers  the  question^  ^‘Which  partial  actuator  filters  should  be  spawned  next?^^ 
The  partial  filters  contained  in  Bank  b  (ti+i),  where  b  (t^+i)  is  calculated  in  Equation  (4.28),  should 
be  used  next. 

Because  the  banks  only  differ  in  the  spawned  filters,  bank  swapping  simply  chooses  which 
spawned  filters  are  used.  For  this  implementation,  the  spawned  filters  are  always  used.  As  an 
alternative,  the  spawned  filters  could  be  used  only  if  the  largest  p^  (ti)  corresponds  to  an  actuator 
failure.  If  the  largest  pj^  {U)  is  for  a  fully  functional  aircraft  or  sensor  failure,  then  the  spawned 
filters  should  not  be  used.  (This  is  equivalent  to  using  Bank  #1.) 

4>4>4^^  Swapping  Conditional  Probabilities,  Before  a  new  bank  can  be  used,  initial 
conditional  probabilities  of  the  elemental  filters  within  the  new  bank  must  be  defined.  To  do  this, 
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first  notice  in  Table  10  that  all  banks  share  the  same  first  12  filters.  The  spawned  filters,  however, 
differ  from  bank  to  bank.  Thus,  simply  assigning  the  conditional  probabilities  of  the  old  bank  to 
the  new  bank  is  not  valid. 

The  spawned  filters’  conditional  probabilities  must  be  “collapsed”  into  the  complete  failure 
actuator  filter  on  which  the  spawned  filters  are  based.  A  rigorous  “collapse”  would  be  to  re-compute 
the  conditional  probabilities  using  Equation  (2.19)  vnthout  considering  the  spawned  filters.  However, 
the  formulation  in  Equation  (4.20)  is  used  because  it  saves  computation  time  and  the  probabilities 
only  serve  as  initial  conditions  for  the  new  bank.  The  probabilities  will  disperse  into  the  correct 
channels  after  a  few  sample  periods. 

To  enhance  this  dispersion,  the  probability  associated  with  the  actuator  filter  that  triggered  a 
bank  swap  is  “expanded”  to  the  spawned  filters.  Rather  than  simply  assign  lower  bound  probabilities 
to  the  spawned  filters  and  the  remainder  of  the  complete-actuator- failure  filter’s  original  probability 
to  itself,  the  probability  is  divided  equally  among  the  complete-failure  filter  and  the  spawned  filters. 
Thus,  the  spawned  filters  are  lifted  further  from  zero,  allowing  the  probabilities  to  increase  faster^^. 
Also  there  is  no  prebiasing  of  relative  probabilities  among  the  complete-failure  filter  and  the  three 
spawned  filters,  since  all  really  are  equally  likely,  based  on  the  information  available  at  this  time. 

To  summarize,  if  a  change  in  spawned  filters  in  declared,  all  of  the  old  spawned  filters’  probabil¬ 
ities  are  collapsed  into  the  associated  complete- failure  filter  probability,  and  then  the  newly  spawned 
filters  and  the  newly  declared  complete- failure  filter  equally  share  the  probability  that  had  originally 
been  in  that  complete-failure  filter.  The  probability  assignment  “collapse”  and  “expansion”  can  be 
summarized  as 


Condition 

Assignment 

^  ^  h  <  12  except 
k  =  b  (U)  —  1  and  k  =  b  (t^+i) 

Pk  (ii+i)  =  Pk  (ti) 

II 

Pk  (^i+l)  ”  Pk  (I'i)  “k  Pl3  (t'i) 
-|-Pl4  (ii)  ~hPl5  (ii) 

k  =  b{ti+i)  and  13  <  A:  <  15 

^^Becaoise  of  the  recursive  nature  of  the  probability  calculation,  the  initial  condition  affects  the  time  required  for 
a  filter  to  increase  its  probability.  See  Section  2.4.1  for  the  discussion  on  the  effects  of  lower  bounding. 
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Design  Modification  Options 

Presented  in  Figure  6  and  described  throughout  this  section  is  one  possible  implementation 
for  Filter  Spawning.  While  other  possibilities  exist,  this  thesis  will  not  explore  the  effects  of  using 
different  implementations.  In  particular,  the  three  questions  posed  throughout  this  section  may  be 
answered  differently: 

1.  Equation  (4-^1 )  answers  the  question,  ‘^Has  a  failure  occurred?”  The  probability  threshold  may 
be  set  differently  than  0.9.  Increasing  this  threshold  may  caused  failures  to  be  missed  (i.e.,  the 
failure  goes  unnoticed),  while  decreasing  this  threshold  may  increase  false  alarms  (i.e.,  failures 
are  declared  when  either  no  failure  exists  or  it  is  the  incorrect  failure  declaration).  Further, 
techniques  discussed  in  Section  2.4  may  be  employed;  namely,  the  blending  lower  bound  may 
be  set  differently  than  0.005,  the  scalar  penalty  may  be  adjusted  from  the  current  value  —  the 
conditional  probabilities  may  be  smoothed  (through  windowing  techniques),  or  the  conditional 
probabilities  may  be  quantized. 

2.  Equation  (4*24)  answers  the  question,  ^^To  what  extent  has  an  actuator  failure  occurred?”  The 

blending  lower  bound  used  to  form  the  effectiveness  estimate  may  be  set  differently  than  0.005. 
Further,  computing  the  conditional  probabilities  used  in  the  estimate  may  be  calculated  using 
Equation  (2.19)  rather  than  using  the  calculated  in  Equation  (4.20)  for  k  =  ia  and 

calculated  in  Equation  (4.15)  for  k  ^  ia-  Specifically,  Section  5.6  of  the  next  chapter  presents 
a  refined  estimate  of  the  extent  of  an  actuator  failure,  for  use  by  the  Control  Redistribution 
algorithm. 

3.  Equation  (4*28)  answers  the  question,  ^^Which  partial  actuator  filters  should  he  spawned  next?” 
Selecting  the  next  bank  and  deciding  when  to  use  spawned  filters  can  be  modified. 

4>5  Chapter  Summary 

This  chapter  started  by  reviewing  in  detail  the  necessary  models  used  in  the  MMAE  algo¬ 
rithm.  Filter  Spawning  was  discussed  conceptually  to  motivate  its  use  and  to  give  an  overview  of 
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its  enhancement  to  estimation.  Finally,  Filter  Spawning  was  detailed  as  it  is  implemented  for  this 
research.  Each  phase  of  the  flow  chart  in  Figure  6  was  discussed:  “Initialization”,  “Conventional 
MMAE  Computation”,  “Detection,  Estimation,  and  Control”,  and  “Bank  Swapping”.  The  reader 
should  have  sufficient  knowledge  to  duplicate  the  use  of  Filter  Spawning  as  implemented  in  this  re¬ 
search,  as  well  as  be  able  to  understand  the  impact  of  the  results  presented  in  the  following  chapter. 
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Chapter  5  -  Simulation  Results 


5.1  Chapter  Overview 

This  chapter  presents  the  simulation  results  of  the  MMAE/ CR  algorithm  with  Filter  Spawning 
to  address  partial  failures  of  actuators.  Discretization  sets  for  the  spawned  filters  are  chosen  in 
Section  5.2.  The  conditional  probabilities  at  each  sample  time  are  plotted  in  Section  5.3.  Using 
this  information,  a  blended  estimate  of  the  effectiveness  of  the  partially  failed  actuator  is  found 
at  each  sample  time  in  Section  5.4.  Averaging  this  estimate  over  time,  a  parameter  estimate  for 
each  true  parameter  value  is  found  in  Section  5.5.  Using  the  knowledge  of  this  relationship,  the 
estimate  is  refined  in  Section  5.6  before  using  it  for  Control  Redistribution  (CR).  Finally,  Section  5.7 
summarizes  the  design  and  implementation  processes. 

5.2  Discretization  Sets 

In  Multiple  Model  Adaptive  Estimation  (MMAE)  with  Filter  Spawning,  filters  are  spawned 
with  an  effectiveness  value  ,  where  ia  is  the  actuator  failure  index  and  is  is  the  spawned  filter’s 
assumed  effectiveness  index.  For  this  research,  three  spawned  filters  are  used,  i.e.,  is  =  1, 2, 3.  The 
subscript  ia,  permits  the  use  of  different  discretization  levels  for  each  actuator.  For  simplicity,  all 
actuators  will  use  the  same  level  of  discretization  in  this  research;  that  is,  and  €^^3  are  the 

same  for  all  ia^ 

Four  sets  of  discretizations  are  considered,  as  shown  in  Table  11.  Set  ^^1  was  chosen  to  be 
consistent  with  prior  research.  Clark  [8]  estimated  the  effectiveness  by  blending  the  fully  functional 
filter’s  estimate  with  the  complete  actuator  failure  filter’s  estimate,  using  the  respective  conditional 
probabilities  as  the  blending  weighting.  Further,  the  estimate  was  quantized  to  one  of  the  following 
effectiveness  values:  10%,  25%,  and  50%.  This  was  done  because  it  was  thought  that  estimating 
a  small  effectiveness  value  (i.e.,  a  high  percentage  failure)  would  be  easier  than  estimating  a  large 
effectiveness  value.  Set  #2  was  chosen  after  initial  studies  of  Set  #1  showed  that  =  10%  was 
too  close  to  e  =  0%  as  hypothesized  by  the  complete  actuator  failure  filter.  (Through  the  results 


presented  in  this  chapter,  the  validity  of  this  statement  will  be  clear.)  Thus,  Set  #2  provides  a 
discretization  that  favors  estimating  small  effectiveness  values  over  large  effectiveness  values.  In 
contrast,  Set  #4  was  chosen  to  provide  a  discretization  that  favors  estimating  large  effectiveness 
values  over  small  effectiveness  values.  Set  ^3  was  chosen  to  be  impartial  to  small  and  large 


effectiveness  values. 


Table  11.  Discretization  Sets 


Set  #1 

Set  #2 

Set  #3 

Set  #4 

10% 

20% 

25% 

40% 

25% 

40% 

50% 

60% 

50% 

60% 

75% 

80% 

5.3  Probability  Plot 

5.3.1  Description 

The  simulation  starts  at  time  equal  to  zero,  with  a  fully  functional  aircraft  in  steady  level  flight 
at  0.4  Mach  at  20,000  feet.  At  one  second,  a  failure  is  introduced  into  the  truth  model.  The  failure 
is  maintained  for  the  duration  of  the  simulation,  or  seven  additional  seconds.  While  only  actuator 
failures  will  be  shown,  complete  sensor  failures  were  considered  to  validate  the  design.  That  is,  the 
introduction  of  filter  spawning  is  shown  not  to  affect  the  detection  of  complete  sensor  failures  as 
demonstrated  in  previous  research  [8,18,41,42]. 

The  “probability  plot”  is  a  plot  of  the  conditional  probability  for  each  filter  over  time.  Ten 
Monte  Carlo  runs  were  performed  for  each  simulation.  The  mean  is  plotted  as  solid  line  and 
(mean  d::  la)  bounds  are  plotted  as  dotted  lines.  The  conditional  probabilities  generated  by  the 
MMAE  with  Filter  Spawning  algorithm  at  each  time  sample  were  written  to  a  data  file.  The  only 
post-processing  was  computing  the  mean  and  standard  deviation  over  the  10  Monte  Carlo  runs. 

There  are  15  filters  in  the  MMAE  algorithm  (see  Table  10  on  page  59).  A  “probability  plot”  for 
a  20%  left  stabilator  failure  using  the  discretization  set  #1  is  shown  in  Figure  7.  Of  most  significance 
are  the  top  two  plots  (probabilities  for  fully  functional  aircraft  and  complete  left  stabilator  failure 
hypotheses)  and  the  last  three  plots  (probabilities  for  the  three  spawned  filters).  Notice  that  the 
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Time  (sec) 


Figure  7.  Probability  Plot  (All  Channels):  Left  Stabilator  Failure,  etrue  =  20%,  Spawned  Filter 
Discretization  10%,  25%,  50% 
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channels  with  wrong  hypotheses  remain  near  zero  during  most  of  the  simulation.  These  filters’ 
probabilities  provide  little  information;  they  verify  that  wrong  filters  do  not  obtain  high  probabilities. 
As  a  result,  the  “probability  plots”  throughout  the  remainder  of  this  section  do  not  show  these  filters’ 
conditional  probabilities.  (While  the  probabilities  of  wrong  filters  are  not  shown,  they  were  verified 
to  be  near  zero  during  most  of  the  simulation  for  every  case  considered.)  Explicitly,  the  remaining 
“probability  plots”  show  the  conditional  probabilities  for  the  fully  functional  filter,  the  complete 
actuator  failure  filter,  and  the  three  spawned  filters. 

5.3.2  Results 

Probability  plots  are  formed  varying  the  discretization  set,  the  actuator,  and  the  effectiveness. 
Eleven  effectiveness  values  are  considered: 

=  0, 10,20,  ,100  (5.1) 

Notice  that  the  fully  functional  and  complete  actuator  failure  cases  are  included.  Each  actuator 
failure  at  a  given  effectiveness  (for  each  of  the  eleven  effectiveness  values  given  in  Equation  (5.1))  is 
shown  while  the  discretization  varies  among  the  four  sets  of  Table  10  within  subplots  (a)  through 
(d)  of  each  figure.  Presented  here  are  the  probability  plots  for  the  left  stabilaton  The  right 
stabilator,  left  flaperon,  right  flaperon,  and  rudder  probability  plots  are  shown  in  Appendix  B.  The 
corresponding  figure  number  and  page  number  for  each  effectiveness  value  of  the  left  stabilator  failure 
are  given  in  Table  12. 

Table  12.  Figure  Numbers  for  Left  Stabilator  Failure  Probability  Plots 


Figure 

Left  Stabilator  Failure  Effectiveness,  Stme 

Page 

8 

0% 

74 

9 

10% 

75 

10 

20% 

76 

11 

30% 

77 

12 

40% 

78 

13 

50% 

79 

14 

60% 

80 

15 

70% 

81 

16 

80% 

82 

17 

90% 

83 

18 

100% 

84 
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Time  (sec)  Time  (sec) 

(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  8.  Probability  Plot:  Left  Stabilator  Failure,  e  =  0% 
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Time  (sec)  Time  (sec) 

(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  9,  Probability  Plot;  Left  Stabilator  Failure,  e  =  10% 
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Time  (sec)  Time  (sec) 

(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  10.  Probability  Plot:  Left  Stabilator  Failure,  e  =  20% 


Time  (sec)  Time  (sec) 

(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  11.  Probability  Plot:  Left  Stabilator  Failure,  e  =  30% 
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Time  (sec)  Time  (sec) 

(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  12,  Probability  Plot:  Left  Stabilator  Failure,  e  =  40% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  13.  Probability  Plot:  Left  Stabilator  Failure,  e  =  50% 
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(c)  Discretization  Set:  25%,  50%,  75% 


T - 1 — ^ - T" — ^  r 


Time  (sec) 

(d)  Discretization  Set:  40%,  60%,  80% 


Figure  14.  Probability  Plot:  Left  Stabilator  Failure,  e  =  60% 
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01  234567801  234567 


Time  (sec)  Time  (sec) 

(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  15.  Probability  Plot:  Left  Stabilator  Failure,  e  =  70% 
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Time  (sec)  Time  (sec) 

(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  17.  Probability  Plot:  Left  Stabilator  Failure,  e  =  90% 
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Figure  18.  Probability  Plot:  Left  Stabilator  Failure,  e  =  100% 


5.3.3  Analysis 

While  much  can  be  said  about  these  probability  plots,  an  analysis  is  provided  later.  The 
probability  plots  are  used  to  clarify  the  plots  that  follow  in  Sections  5.4  and  5.6  and  will  be  discussed 
further  within  those  sections. 

5.4  Parameter  Estimate  Versus  Time  Plot 

5.4*1  Description 

In  Section  5.3,  the  probability  plots  for  the  left  stabilator  are  shown  for  each  effectiveness 
value  in  Equation  (5.1).  In  Appendix  B,  the  probability  plots  for  the  right  stabilator,  left  flaperon, 
right  flaperon,  and  rudder  are  shown  for  each  effectiveness  value  in  Equation  (5.1).  Recall  from 

Equation  (4.24)  that  the  effectiveness  estimate,  e,  is  formed  as 

-ff  \  +  ej2Pu{ti)  +  ejspisjti)  2^) 

Pj{U)  -^Vis{U)  -hpuiti)  -hpi^iU)  -\-Pi{ti) 

where  pi  is  the  conditional  probability  of  the  fully  functional  filter;  pj  is  the  conditional  probability 
of  the  complete  actuator  failure;  Pis,Pu,  and  P15  are  the  conditional  probabilities  of  the  spawned 
filters;  and  1,6^2,  and  ejs  are  the  hypothesized  effectiveness  values  of  the  spawned  filters.  The 
conditional  probabilities  for  each  filter  at  all  times  U  are  given  in  the  probability  plots.  (Recall 
the  discrete  time  ti  is  used  because  the  probabilities  are  found  64  times  a  second,  not  continuously.) 
The  effectiveness  values  of  the  spawned  filters  correspond  to  the  discretization  set.  Thus,  for  each 
failure.  Equation  (5.2)  is  used  to  obtain  an  effectiveness  estimate^^  at  each  time  sample. 

The  “parameter  estimate  versus  time  plot”  is  a  plot  of  the  parameter  estimate  found  by  the 
algorithm  over  time,  where  the  true  effectiveness  values  in  Equation  (5.1)  were  considered.  Ten 
Monte  Carlo  runs  were  performed  for  each  simulation.  The  mean  is  plotted  as  solid  line,  and 
(mean  zb  la)  bounds  are  plotted  as  dash-dot  lines.  The  parameter  estimate  generated  by  the 
MMAE  with  Filter  Spawning  algorithm  at  each  time  sample  was  written  to  a  data  file.  The  only 
post-processing  was  computing  the  mean  and  standard  deviation  over  the  10  Monte  Carlo  runs. 

parameter  estimate  consists  of  the  failnre  index  (i.e.,  identifying  which  actuator  or  sensor  has  failed)  and  the 
effectiveness  in  the  case  of  an  actuator  failure.  Here,  since  the  algorithm  has  correctly  detected  the  proper  actuator 
failure,  the  remaining  parameter  estimate  consists  of  an  estimate  of  the  effectiveness.  Thus,  parameter  estimate  and 
effectiveness  estimate  are  used  interchangeably. 
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Results 


The  parameter  estimate  meandzlcr  versus  time  is  computed  for  each  failure.  The  left  stabilator 
is  shown  here,  where  the  figure  and  page  numbers  are  listed  in  Table  13.  The  parameter  estimates 
versus  time  for  the  remaining  failures  are  shown  in  Appendix  C.  In  each  figure  of  this  section  and 
in  Appendix  C,  the  subplots  vary  the  true  effectiveness  from  0%  to  100%  in  steps  of  10%. 

Table  13.  Figure  Numbers  for  Parameter  Estimates  Versus  Time  Plots 


Figure 

Discretization  Set 

Page 

19 

#1  -  10%,  25%,  50% 

87 

20 

#2 -20%,  40%,  60% 

88 

21 

#3 -25%,  50%,  75% 

89 

22 

#4 -40%,  60%,  80% 

90 

5.4 Analysis 

All  of  the  information  contained  in  parameter  estimate  versus  time  plots  can  be  extracted  from 
the  probability  plots.  Moreover,  the  probability  plots  indicate  in  detail  how  the  MMAE  produces 
its  parameter  estimate  through  the  mechanism  of  probability  flow  to  the  individual  filters  within 
the  MMAE  architecture.  The  parameter  estimate  versus  time  plots  show  the  blended  estimate  at 
each  time,  using  the  conditional  probabilities  given  in  the  probability  plots  for  each  hypothesized 
parameter  value.  For  instance,  compare  Figure  12(a)  to  Figure  19(at^^e  —  40%).  In  Figure  12(a), 
from  0  to  1  second,  the  fully  functional  Alter  (FF)  contains  most  of  the  probability.  Thus,  the  reader 
can  expect  the  estimate  to  be  around  100%,  as  shown  in  Figure  19(at7.ue  =  40%).  In  Figure  12(a), 
from  1  to  7.5  seconds,  the  fully  functional  (FF)  filter  slowly  gives  its  probability  to  the  third  spawned 
filter  (S3),  with  a  50%  failure  hypothesis.  Notice  the  large  ibcr  bounds  indicate  that  the  probability 
exchange  varied  considerably  for  each  Monte  Carlo  run.  Now  turn  to  Figure  19(at^T,e  =  40%).  From 
1  to  7.5  seconds,  the  estimate  slowly  goes  from  100%  to  50%.  The  large  ±cr  bounds  indicate  that 
the  estimate  varied  considerably  for  each  Monte  Carlo  run.  Finally,  in  Figure  12(a)  from  7.5  to  8 
seconds,  the  third  spawned  filter  (S3)  contains  most  of  the  probability  over  all  of  the  Monte  Carlo 
runs.  In  Figure  19(a£^-„e  =  40%),  the  estimate  is  at  50%  with  very  small  (unnoticeable  at  this  scale) 
±(7  bounds. 
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Plotting  the  parameter  estimate  versus  time  shows  clearly  the  convergence  rate  of  the  parameter 
estimate^^.  The  mean  and  ±1g  bounds  give  an  indication  of  the  time  to  converge  to  a  solution. 
Notice  the  estimate  converges  by  U  ^  4  seconds  for  each  discretization  set.  Recalling  the  failure  is 
introduced  at  1  second,  the  estimate  converges  by  3  seconds  after  the  failure  for  each  discretization 
set.  This  information  is  very  useful  in  deciding  when  to  use  the  parameter  estimate.  While  the 
plots  do  not  indicate  it,  the  correct  failure  is  detected  in  about  one  second.  (In  other  words,  a 
correct  indication  of  which  actuator  has  failed  is  found  by  ti  ^  2  sec.)  Thus,  after  a  failure  is 
detected  (one  second  after  the  failure),  the  algorithm  must  wait  about  two  seconds  (three  seconds 
after  the  failure)  before  an  accurate  estimate  of  actuator  effectiveness  (or  its  complement,  degree  of 
failure)  is  obtained. 

5.5  Parameter  Estimate  Versus  True  Parameter  Plots 

5.5.1  Description 

Just  as  the  parameter  estimates  were  found  for  etme  =  0, 10, 20,  ,100  in  Section  5,4,  a 

parameter  estimate  could  be  found  for  a  more  complete  set  of  true  parameter  estimates.  A  parameter 
estimate  (mean  and  standard  deviation)  versus  time  was  found  for  each  true  parameter  value 

=  0,1,2,  ,100  (5.3) 

Thus,  to  show  a  more  complete  analysis,  a  plot  of  the  parameter  estimate  versus  time  could  be 
shown  for  all  101  values  of  the  true  parameter.  Rather  than  do  so  and  overwhelm  the  reader  (or 
designer)  with  many  such  plots,  the  information  is  instead  compacted  into  a  digestible  and  useful 
form.  First,  the  parameter  estimates’  mean  and  standard  deviations  are  averaged  over  time  for  each 
true  parameter  value.  The  time-average  starts  when  the  estimate  has  essentially  converged.  For 
simplicity,  this  value  is  selected  as  4  seconds  for  all  true  parameter  values  and  discretization  sets. 
The  time-average  is  taken  over  the  remainder  of  the  simulation,  i.e.,  from  4  seconds  to  8  seconds. 


^^Previous  research  efforts  could  rely  on  the  probability  plots  to  “see”  parameter  estimation  convergence  rates 
because  blending  was  not  used. 


91 


The  time-averaged  mean  parameter  estimate  is  expressed  as 

^(.^true)-  (8 -4) -64 

where  there  are  (8  —  4)  ■  64  =  256  data  points,  and  where  a  (U^Sitrue)  is  the  Monte  Carlo  sample  mean 


(5.4) 


of  the  parameter  estimate  a  {ti,Sitrue)-  Notice  that  the  time-averaged  mean  parameter  estimate  is 
expressed  explicitly  as  a  function  of  the  true  parameter.  (The  parameter  estimate  is  also  a  function 
of  the  discretization  set.) 

The  MMAE  with  Filter  Spawning  algorithm  computes  the  parameter  estimate  at  each  time 
sample  and  outputs  it  to  a  data  file.  This  is  done  for  each  true  effectiveness  given  in  Equation  (5.3). 
Post-processing  the  data,  the  mean  and  standard  deviation  of  each  parameter  estimate  at  each  time 
ti  is  computed  over  10  Monte  Carlo  runs.  Finally,  a  time-averaged  meambla  parameter  estimate 
is  found  using  Equation  (5.4)  for  each  true  effectiveness  given  in  Equation  (5.3),  Specifically,  the 
time-averaged  mean  of  the  parameter  estimate  is  found  using  Equation  (5.4)  where  the  mean  (over 
the  10  Monte  Carlo  runs)  of  a{ti,a.true)  is  used,  and  the  time-averaged  standard  deviation  of  the 
parameter  estimate  is  found  using  Equation  (5.4)  where  the  standard  deviation  (over  the  10  Monte 
Carlo  runs)  of  ei{ti,aitrue)  is  used..  The  time-averaged  mean  is  plotted  as  a  solid  line,  and  the 
time-averaged  dzlcr  bounds  are  plotted  as  dash-dot  lines  symmetrically  displaced  about  that  mean. 

Ideally,  the  parameter  estimate  would  equal  the  true  parameter  for  all  true  parameter  values. 
This  plot  is  shown  as  the  solid  line,  a.hat  ”  ^truet  to  guide  the  reader’s  eye  to  the  deviations  from 
the  ideal  case. 


5,5.2  Results 

First,  Figure  23  demonstrates  the  effect  of  starting  at  the  time  of  convergence.  In  Figure  23(a) , 
the  time-average  is  naively  started  when  the  failure  is  detected  (i.e.,  ti  =  2  sec.).  In  Figure  23(b), 
the  time-average  is  based  on  the  information  obtained  from  the  parameter  estimate  versus  time 
plot  and  is  started  two  seconds  after  the  failure  is  detected  (i.e.,  ti  =  A  sec.).  Notice  that  the  ±lcr 
bounds  are  much  smaller  in  Figure  23(b) .  The  mean  also  shifts  slightly  and  flattens  more  noticeably 
at  the  discretization  levels.  (The  spawned  filter  discretization  levels  were  40%,  60%,  and  80%,  as 
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in  Figure  22.)  Thus,  the  information  gained  by  plotting  the  parameter  estimate  versus  time  (i.e., 
the  time  to  reach  essential  convergence)  reduces  the  uncertainty  in  the  time-averaged  parameter 
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Figure  23.  Estimated  Versus  True  Paramter  Plot:  Comparision  of  Time- Average  Range 

Second,  the  estimated  versus  true  parameters  are  shown  for  each  failure  and  discretization 
set.  Figures  24  through  28  show  the  left  stabilator  failure,  right  stabilator  failure,  left  flaperon 
failure,  right  flaperon  failure,  and  rudder  failure,  respectively.  The  subplots  (a)  through  (d)  of  each 
figure  show  the  parameter  estimate  versus  the  true  parameter  using  each  discretization  set  defined 
in  Table  11. 

5.5.3  Analysis 

The  information  contained  in  the  “probability  plots”  and  the  “parameter  estimate  versus  time 
plots”  is  presented  in  five  “parameter  estimate  versus  true  parameter  plots”  for  each  discretization 
set.  Because  of  the  compact  representation,  conclusions  can  be  drawn  easily  with  one  plot  instead  of 


93 


comparing  multiple  plots.  The  following  conclusions  are  made  (note  that  some  references  compare 
multiple  plots  so  the  reader  can  better  understand  the  information  contained  in  the  “parameter 
estimate  versus  true  parameter  plot’’): 

1.  Convergence  to  Complete  Failure  Hypothesis:  Because  Control  Redistribution  uses  a  different 

computational  philosophy  for  complete  versus  partial  failures  (see  Section  3.6),  it  is  important 
that  for  B^true  =  0%)  parameter  estimate  indicates  a  complete  actuator  failure.  Figure  24 
shows  that,  in  going  from  a  spacing  0%,  10%  in  (a)  to  a  spacing  0%,  25%  in  (b),  the  algorithm 
converges  to  the  complete  actuator  failure  estimate  at  =  0%.  This  is  also  seen  in 

Figure  8(a),  noticing  that  the  first  spawned  filter  (Si)  at  10%  shares  the  probability  with  the 
complete  left  stabilator  failure  filter  (LS),  but  in  Figure  8(b),  the  first  spawned  filter  (Si)  at  25% 
does  not  share  the  probability  with  the  complete  left  stabilator  failure  filter  (LS).  Likewise,  in 
Figure  I9{a.true  =  0)  the  estimate  is  not  zero,  but  in  Figure  20(atrue  =  0)  the  estimate  is  zero. 
(Notice  in  Figure  27  for  the  right  fiaperon,  this  convergence  to  the  complete  actuator  failure  at 

=  0%  does  not  occur  until  the  separation  (0%,40%)  between  the  two  lowest  assumed  a 
values  is  achieved.  This  attribute  can  be  found  in  the  probability  plots  and  parameter  estimate 
versus  time  plots  in  Appendix  B  as  well.) 

2.  Blending  and  Uncertainty  Trade-off:  Notice  in  Figure  24(b)  that  the  mean  is  blended  well, 
but  in  Figure  24(d)  the  mean  flattens  at  each  discretization  level  (except  at  80%).  Although  a 
blended  estimate  is  more  desirable,  the  flattened  estimate’s  drier  bounds  are  smaller.  Thus,  a 
trade-off  exists  between  blending  and  uncertainty  in  the  estimate.  Consider  the  region  20%  to 
30%  to  see  this  trade-off  in  the  probability  plots.  In  Figures  10(d)  and  11(d)  the  first  spawned 
filter  (Si)  at  40%  consumes  most  of  the  probability  with  small  deviations  after  U  =  4  sec.  But 
in  Figure  10(b),  the  probability  is  shared  among  the  first  spawned  filter  (Si)  at  20%  and  the 
second  spawned  filter  (S2)  at  40%  with  large  drier  bounds,  and  in  Figure  11(b),  the  probability 
is  shared  among  the  second  spawned  filter  (S2)  at  40%  and  the  fully  functional  filter  (FF)  at 
100%  with  large  drla  bounds.  This  trade-off  can  also  be  seen  in  the  parameter  estimate  versus 
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=  30%  remain  the  same 


time  plots.  In  Figure  22,  the  estimates  for  Sitrue  =  20%  and  Sitrue 
and  the  ilcr  bounds  are  small  in  both  cases,  but  in  Figure  20,  the  estimates  for  S-true  =  20% 
and  SLtrue  =  30%  vary  in  proportion  to  atme  and  the  ±la  bounds  are  larger  than  Set  #4’s  ±la 
bounds  in  Figure  22. 

3.  Poor  Estimation  Beyond  atme  =  70%:  In  Figures  24  through  27,  no  discretization  set  performs 
well  for  a  true  effectiveness  greater  than  70%,  for  all  actuators  except  the  rudder.  Thus, 
an  effectiveness  greater  than  70%  appears  as  a  fully  functional  aircraft  to  the  algorithm,  or  a 
failure  goes  unnoticed  until  the  failure’s  effectiveness  is  less  than  70%.  Because  this  attribute 
is  undesirable,  improving  performance  for  a  true  effectiveness  greater  than  70%  was  attempted 
by  using  discretization  sets  40%,  60%,  90%  and  70%,  80%,  90%.  The  result  was  degraded 
performance  in  the  region  less  than  70%,  with  no  improvement  in  the  region  beyond  70%.  This 
effect  is  also  seen  in  the  probability  plots  for  the  left  stabilator  in  Figures  15  through  18.  Notice 
for  all  discretization  sets  (a-d),  the  fully  functional  filter  (FF)  receives  most  of  the  probability. 
The  probability  plots  for  the  right  stabilator,  left  fiaperon  and  right  fiaperon  in  Appendix  B 
show  similar  results.  In  addition,  this  effect  is  seen  also  in  the  parameter  estimate  versus  time 
plots  for  the  left  stabilator  in  Figures  19  through  22  in  the  subplots  of  atme  =  70%  through 
Sitme  =  100%.  The  parameter  estimate  versus  time  plots  for  the  right  stabilator,  left  fiaperon 
and  right  fiaperon  in  Appendix  C  show  similar  results. 

4.  Poor  Estimation  for  Small  Effectiveness^  Rudder  Failures:  In  Figure  28,  no  discretization  set 
performs  well  for  a  true  effectiveness  less  than  the  lowest  hypothesized  effectiveness  value  for 
the  rudder.  Thus,  small  values  of  true  effectiveness  for  a  rudder  failure  appear  to  the  algorithm 
as  a  complete  rudder  failure.  When  the  estimate  is  used  in  Control  Redistribution,  it  is 
acceptable  to  have  small  effectiveness  values  appear  as  complete  rudder  failures.  This  does  not 
allow  the  rudder  to  be  used  when  some  control  authority  could  still  be  obtained;  however,  the 
designer  must  admit  that  using  an  actuator  with  a  small  effectiveness  value  may  only  degrade 
the  actuator  further.  This  effect  is  seen  in  the  probability  plots  in  Appendix  B  in  Figures  80 


100 


through  83.  For  all  discretization  sets  (a-d),  the  complete  rudder  failure  filter  (R)  receives 
most  of  the  probability.  This  effect  is  seen  also  in  the  parameter  estimate  versus  time  plots  in 
Appendix  C  in  Figures  96  through  99  in  the  subplots  of  B.tru&  =  70%  through  B^tme  =  100%. 

5.  Bias  in  the  Estimate:  Through  the  aid  of  the  =  ^true  line,  in  Figures  24  through  27  (i.e., 
for  stabilators  and  flaperons)  for  all  discretization  sets  (a-d),  the  effectiveness  estimate  is  larger 
than  the  true  effectiveness  (except  the  fully  functional  and  complete  failure  cases).  In  contrast, 
in  Figure  28  (i.e.,  for  the  rudder)  for  all  discretization  sets  (a-d),  the  effectiveness  estimate 
is  smaller  than  the  true  effectiveness  (except  the  fully  functional  and  complete  failure  cases). 
This  effect  is  seen  in  the  probability  plots  for  the  left  stabilator  in  Figures  9  through  17.  Notice 
for  all  discretization  sets  (a-d),  a  filter  with  a  larger  hypothesized  effectiveness  than  the  true 
effectiveness  consumes  most  of  the  probability.  The  probability  plots  for  the  right  stabilator, 
left  flaperon  and  right  flaperon  in  Appendix  B  show  similar  results.  This  effect  is  seen  also  in 
the  parameter  estimate  versus  time  plots  for  the  left  stabilator  in  Figures  19  through  22  in  the 
subplots  of  aitrue  =  10%  through  atme  =  90%.  The  parameter  estimate  versus  time  plots  for 
the  right  stabilator,  left  flaperon  and  right  flaperon  in  Appendix  C  show  similar  results. 

6.  Flaperon  Estimation  Better  Than  Stabilator  Estimation:  Comparing  the  dbla  bounds  for  the 
flaperons  in  Figures  26  and  27  to  the  iblcr  bounds  for  the  stabilators  in  Figures  24  and  25, 
respectively,  the  performance  is  better  for  all  discretization  sets  (a-d).  As  anticipated,  this 
effect  is  also  seen  in  the  probability  plots.  The  left  stabilator  in  Figures  8  through  18  and 
the  right  stabilator  in  Figures  40  through  50  in  Appendix  B  have  larger  drier  bounds  than 
the  left  flaperon  in  Figures  51  through  61  in  Appendix  B  and  the  right  flaperon  in  Figures  62 
through  72  in  Appendix  B,  respectively.  (Notice  how  time-consuming  it  is  to  “see”  this  result 
looking  at  the  numerous  probability  plots  versus  Figures  24  through  27!)  Furthermore,  this 
effect  is  seen  also  in  the  parameter  estimate  versus  time  plots.  The  left  stabilator  in  Figures  19 
through  22  in  all  subplots  corresponding  to  different  values  of  atma  and  the  right  stabilator 
Figures  84  through  87  in  all  subplots  of  atme  Appendix  C,  have  larger  ±la  bounds  than 
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the  left  flaperon  in  Figures  88  through  91  in  all  subplots  of  Oitme  in  Appendix  C  and  the  right 
flaperon  in  Figures  92  through  95  in  all  subplots  of  Oitme  in  Appendix  C,  respectively.  Notice 
again  how  time-consuming  it  is  to  “see”  this  result  looking  at  the  numerous  plots.  For  a 
designer,  plots  of  the  form  of  Figures  24  through  27  are  extremely  useful  for  making  design 
decisions. 

7.  Right  Channel  Estimation  Better  Than  Left  Channel  Estimation:  Comparing  the  ±lcr  bounds 
for  the  right  channel  in  Figures  25  and  27  to  the  ±lcr  bounds  for  the  left  channel  in  Figures  24 
and  26,  respectively,  the  right  channel  performance  is  superior  for  all  discretization  sets  (a- 
d).  The  improvement  for  the  discretization  sets  in  (a)  and  (b)  is  seen  somewhat  more  readily 
because  the  iblcr  bounds  are  larger  than  the  discretization  sets  in  (c)  and  (d).  This  effect  is 
attributed  to  how  the  dither  is  applied;  the  phasing  is  different  for  the  right  and  left  channels, 
for  both  stabilators  and  fiaperons.  Prior  research  has  found  similar  results  [8,18,41,42],  As 
before,  this  effect  is  also  seen  in  the  probability  plots.  The  left  stabilator  in  Figures  8  through  18 
and  the  left  flaperon  in  Figures  51  through  61  in  Appendix  B  have  larger  ±la  bounds  than  the 
right  stabilator  in  Figures  40  through  50  in  Appendix  B  and  the  right  flaperon  in  Figures  62 
through  72  in  Appendix  B,  respectively.  (Again,  it  is  time-consuming  to  “see”  this  result 
looking  at  the  numerous  probability  plots.)  Also,  as  found  previously,  this  effect  is  evident 
in  the  parameter  estimate  versus  time  plots.  The  left  stabilator  in  Figures  19  through  22  in 
all  subplots  of  atrue  and  the  left  flaperon  in  Figures  88  through  91  in  all  subplots  of  atme  in 
Appendix  C  have  larger  ±la  bounds  than  the  right  stabilator  Figures  84  through  87  in  all 
subplots  of  atrue  in  Appendix  C  and  the  right  flaperon  in  Figures  92  through  95  in  all  subplots 
of  atrue  in  Appendix  C,  respectively.  (Again,  a  designer  can  see  these  trends  more  efficiently 
from  the  digested  form  of  Figures  24  through  27  than  from  the  numerous  time  plots.) 

8.  Rudder  Behavior  ^^Opposite''  Other  Actuators:  Notice  the  rudder  in  Figure  28  behaves  in  a 
manner  opposite  that  of  the  other  actuators.  First,  for  the  rudder,  an  accurate  estimate  is 
difficult  to  obtain  when  the  true  parameter  is  near  a  complete  failure,  whereas  for  the  other 
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actuators,  an  accurate  estimate  is  difficult  to  obtain  when  the  true  parameter  is  near  a  fully 
functional  aircraft.  Second,  for  the  rudder,  the  estimated  parameter  is  consistently  smaller 
than  the  true  parameter  value,  whereas  for  the  other  actuators,  the  estimated  parameter  is 
consistently  larger  than  the  true  parameter  value.  Previous  research  also  found  the  rudder 
behaved  differently  from  the  other  actuators  [8].  The  exact  behavioral  difference  was  not 
known  until  the  MMAE  with  Filter  Spawning  parameter  estimate  versus  true  parameter  plot 
was  obtained.  The  reason  for  the  behavioral  difference  can  be  attributed,  in  part,  to  the  fact 
that  the  rudder  is  used  very  little  during  this  flight  profile  and  that  its  control  authority  is  less 
than  that  of  the  other  actuators. 

5.5.4  Selecting  A  Discretization  Set 

The  parameter  estimate  versus  true  parameter  plots  allow  a  convenient  comparison  among  the 
discretization  sets.  To  decide  which  discretization  set  is  “best” ,  the  application  must  be  taken  into 
account.  For  this  research,  a  parameter  estimate  is  sought  in  order  to  apply  Control  Redistribution 
(CR)  to  maintain  stability  and  control  of  the  VISTA  F-16  under  partial  and  complete  actuator 
failures.  While  merely  detecting  a  failure  is  sufficient  to  provide  limited  control  through  complete 
failure  CR,  this  research  seeks  to  estimate  the  degree  of  the  failure  so  that  partial  failure  CR 
(or,  modified  CR)  can  be  applied  to  the  aircraft  (hopefully  resulting  in  a  smaller  degradation  in 
performance  from  the  fully  functional  aircraft  than  that  of  CR  with  complete  failure  assumptions). 

With  this  in  mind,  reconsider  the  discretization  sets.  The  discretization  Sets  #3  and  #4 
are  favored  over  Sets  ^1  and  ^2  because  they  exhibit  smaller  rbla  bounds  for  most  of  the 
region.  To  choose  between  Sets  #3  and  #4,  compare  Figure  24(c)  to  Figure  24(d).  If  an  actuator’s 
effectiveness  is  small,  even  if  a  good  estimate  of  effectiveness  could  be  obtained,  the  designer  may 
choose  not  to  send  control  authority  to  that  actuator.  As  a  result,  discretization  Set  #4  shown  in 
Figure  24(d)  is  chosen  because  it  drops  off  sharply  in  the  true  effectiveness  interval  of  10% —  20%.  If 
MMAE  with  Filter  Spawning  was  implemented  with  a  different  discretization  set  for  each  actuator 
(i.e.,  €i^i,  €^^2}  and  €1^3  are  different  for  each  i^),  then  Set  #3  would  be  chosen  for  the  rudder  ia  =  5. 
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In  Figure  28,  Set#3  (c)  provides  a  more  even  estimate  than  Set#4  (d),  closer  to  the  a.hat  =  ^true 
line  in  the  a-true  range  of  30%  -  40%  and  without  as  large  a  standard  deviation  in  the  region  of 
=  40%  -  50%. 

5.6  Refined  Parameter  Estimate  Plots 

5.6.1  Description 

With  a  discretization  set  chosen  for  the  spawned  filters,  the  estimate  is  refined  before  it  is  sent 
to  the  Control  Redistribution  (CR)  algorithm,  based  on  the  known  empirical  relationship  of  the 
estimated  versus  true  parameter.  The  refined  estimate,  incorporates  knowledge  of  the  true 

parameter  given  the  estimate  of  the  true  parameter,  as  seen  in  Figures  24  through  28.  Thus,  aout 
more  closely  represents  atme  than  does  a.  Further,  logic  is  incorporated  such  that  CR  (assuming  only 
complete  failures)  or  modified  CR  (assuming  partial  failures)  is  applied  appropriately,  as  discussed 
in  Section  3.6. 

5.6.2  Results 

Figures  29  through  33  repeat  the  a  versus  atme  plots  in  subplot  (a)  and  show  the  aout  versus  a 
plots  in  subplot  (b).  The  function  aout  (a)  is  used  in  the  MMAE  with  Filter  Spawning.  When  an 
estimate,  a,  at  time  U  is  computed  by  the  algorithm,  the  relationships  given  in  Figures  29  through  33 
are  used  to  find  the  refined  estimate,  aout^  depending  on  the  actuator  failure.  In  words,  “Given  a 
parameter  estimate,  a,  the  refined  estimate,  aout^  is  determined  and  used  by  CR.” 

5, 6. 2.1  Refined  Parameter  Estimate  Versus  Parameter  Estimate  Plots.  To  see 
how  the  mapping  given  in  the  ^'Refined  Parameter  Estimate  Versus  Parameter  Estimate  Plots”  in 
the  subplot  (b)  for  Figures  29  through  33  is  used,  consider  Figure  29(b): 

1.  If  the  parameter  estimate  is  less  than  40%,  then  the  refined  estimate,  ao^t,  is  considered  a 
complete  left  stabilator  failure  estimate.  This  assures  that  actuators  with  small  effectiveness 
values  will  not  receive  any  control  input  when  applying  unmodified  CR  (i.e.,  for  complete  failures 
only). 
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2.  If  the  parameter  estimate  is  between  40%  and  96%,  then  the  estimate  is  refined  by  a  piece- 

wise  linear  relationship  to  represent  the  true  parameter  more  appropriately  before  it  is  used 
by  modified  CR.  In  this  region,  the  result  is  intended  to  provide  an  essentially  equal  to 
^tvue-  Notice  in  Figures  31(b)  and  32(b)  that  e^out  levels  at  25%  and  22%,  respectively,  over 
the  domain  =  [39%,  41%].  This  is  done  to  map  the  a  values  in  the  flattened  regions 

in  Figures  31(a)  and  32(a),  respectively,  to  an  appropriate  a^ut  (the  “middle”  of  the  flattened 
region  is  used) . 

3.  If  the  parameter  estimate  is  higher  than  96%,  then  the  refined  estimate  is  considered  a  fully 
functional  estimate  and  control  is  sent  as  usual. 

Notice  that  a^^^e  is  not  a  factor  for  implementation.  Rather,  only  the  estimate,  a,  is  used 
in  the  evaluation  of  Siout  and  control  generation,  because  a.true  is  not  known.  Further,  the  only 
deviation  between  a^ut  and  a.true  in  the  intermediate  range  denoted  as  “2.”  in  the  list  above,  is 
the  stochastic  nature  of  the  problem  and  the  fact  that  SLout  is  based  on  an  empirical  time-averaged 
estimate  starting  two  seconds  after  detection.  Thus,  when  ^{U)  does  not  match  the  time-averaged 
estimate,  a,  some  error  will  exist  in  the  Siout  estimate. 

5 *6, 2. 2  Refined  P ammeter  Estimate  Versus  True  Parameter  and  Time  Plots.  To 
see  how  well  the  refined  parameter  estimate  compares  to  the  true  parameter,  consider  the  Refined 
Parameter  Estimate  Versus  True  Parameter  Plots”  in  the  subplot  (c)  for  Figures  29  through  33. 
These  plots  were  formed  using  the  refined  parameter  estimate  given  by  the  MMAE  with  Filter 
Spawning  algorithm  (incorporating  the  mappings  given  in  the  subplot  (b)  in  Figures  29  through  33) 
at  a  time  two  seconds  after  the  failure  was  declared.  The  plots  show  the  mean  as  a  solid  line,  and 
the  bounds  as  “dash-dot”  lines  symmetrically  displaced  about  the  mean,  where  the  mean  and 
standard  deviation  was  computed  over  10  Monte  Carlo  runs  for  the  refined  parameter  estimate  given 
by  the  MMAE  with  Filter  Spawning  algorithm  two  seconds  after  the  failure  was  declared  for  each 
run. 
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A  single  time  point  was  chosen  to  compare  the  refined  estimate  to  the  true  estimate  for  a  one-to- 
one  correspondence.  It  is  desirable  to  form  a  redistributed  control  vector  as  soon  as  possible.  As  a 
result,  rather  than  wait  to  time-average  the  refined  estimate  (as  was  done  for  the  parameter  estimate 
versus  time  plots) ,  the  refined  parameter  estimate  given  two  seconds  after  declaration  is  used  to  form 
a  redistributed  control  vector.  The  two-second  point  was  chosen  based  on  the  convergence  trends 
seen  in  the  parameter  estimate  versus  time  plots  in  Figures  19  through  22. 

Because  choosing  a  single  point  upon  which  to  base  the  plots  may  bring  doubt  to  the  validity  of 
the  plots,  a  representative  single  Monte  Carlo  run  at  a  single  true  effectiveness  50%  is  shown  in  the 
subplot  (d)  in  Figures  29  through  33.  A  true  effectiveness  of  50%  was  chosen  because  it  represents 
one  point  in  the  region  where  an  estimate  of  the  effectiveness  is  sought.  (This  is  in  contrast  to  low 
true  effectiveness  values,  which  the  mapping  has  forced  to  zero  or  an  indication  of  complete  failure, 
and  high  true  effectiveness  values,  which  the  mapping  has  forced  to  one  and  thus  a  declaration  of  a 
fully  functional  aircraft.) 

The  ^'Refined  Parameter  Estimate  Versus  Time  Plots”  shown  in  the  subplots  (d)  bring  out  two 
things  not  seen  in  the  ^^Refined  Parameter  Estimate  Versus  True  Parameter  Plots”  in  the  subplots 
(c).  First,  time  of  failure  declaration  is  shown  with  a  “tickmark”  placed  at  the  bottom  of  the  plot. 
For  instance,  in  Figure  29(d),  the  failure  is  detected  at  U  =  3.6  sec.  Thus,  the  time  to  declare  a 
failure  for  one  Monte  Carlo  run  at  one  true  effectiveness,  50%,  gives  the  designer  an  indication  of 
when  a  failure  is  declared.  The  time  at  which  the  refined  estimate  is  used  to  be  compared  to  the 
true  effectiveness  is  two  seconds  after  this  declaration.  Notice  that,  consistent  with  previous  results, 
the  right  channel  failures  are  detected  faster  than  the  left  channel  failures  and  the  flaperons  are 
detected  faster  than  the  stabilators  for  this  single  Monte  Carlo  run  at  a  true  effectiveness  value  of 
50%.  Second,  the  Refined  Parameter  Estimate  Versus  Time  Plots”  show  that  the  refined  parameter 
estimate  remains  consistent  over  time  for  this  single  Monte  Carlo  run  at  a  true  effectiveness  value 
of  50%,  except  for  the  rudder.  The  rudder  will  be  addressed  in  Section  5.6. 2.3. 
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With  the  explanation  of  how  the  ^'Refined  Parameter  Estimate  Versus  Time  Plots”  in  the 
subplots  (d)  in  Figures  29  through  33  are  composed,  an  analysis  can  be  made.  First,  subplots  (c) 
show  that  mapping  low  true  effectiveness  values  to  the  complete  failure  estimate  is  improved  over 
that  attainable  in  subplots  (a)  with  the  original  estimate.  Second,  mapping  high  true  effectiveness 
values  to  the  fully  functional  estimate  is  improved.  Third,  the  bias  in  the  middle  region  for  true 
effectiveness  values  in  subplots  (a)  is  removed  in  subplots  (c).  Fourth,  the  levelling  in  the  mapping 
in  Figure  31(b),  as  discussed  in  Section  5.6.2,  successfully  mapped  the  true  effectiveness  values  in  the 
range  15%  —  35%  to  an  =  25%.  Finally,  consistent  with  previous  results,  the  right  stabilator 
and  right  flaperon  do  particularly  well. 

5. 6, 2. 3  Performance  Enhancement. 

The  refined  parameter  estimate  for  the  rudder  in  Figure  33(c)  is  relatively  poor  in  the  region 
Sitrue  —  0%  —  35%.  For  instance,  a  true  effectiveness  of  0%  does  not  consistently  map  to  a  refined 
parameter  estimate  of  0%,  which  is  important  in  deciding  to  use  modified  CR  (for  partial  failures) 
or  CR  (for  complete  failures).  In  addition,  the  single  Monte  Carlo  run  shows  the  refined  estimate 
“jumping”  from  0%  to  40%.  Because  the  refined  estimate  will  be  used  directly  by  the  control  scheme, 
rather  than  allow  “jumping”,  the  refined  estimate  is  mapped  to  zero.  This  conservative  approach 
uses  a  complete  failure  estimate  until  the  effectiveness  estimate  can  be  obtained  consistently.  (Rather 
than  revising  the  mapping,  additional  manipulation  could  be  performed  to  remove  the  “jumping” 
before  using  the  estimate  in  a  control  scheme.)  This  gives  insight  that  the  mapping  of  Figure  33(b) 
should  be  reconsidered.  The  rudder  mapping  in  Figure  33(b)  maps: 

a  <1%  B.out  =  0%  (5.5) 

a  =1%  =>  Qiout  =  40%  (5.6) 

In  an  attempt  to  remove  the  jumping  (as  seen  in  the  single  Monte  Carlo  run  in  Figure  33(d)  and  in 
the  ±la  bounds  in  Figure  33(c)  for  the  region  =  0%  -  30%),  the  mapping  is  redefined: 

a  <5%  Siout  ~  0% 

a  =5%  3iout  =  40% 
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(5.7) 

(5.8) 


In  particular,  the  break-point  for  the  mapping  in  Figure  33(b)  was  moved  from  a  =1%  to  a  =5%. 
The  effect  is  shown  in  Figure  34,  where  subplots  (a)  and  (b)  are  repeated  from  Figure  33 ’s  subplots 
(a)  and  (b),  respectively,  and  subplots  (c)  and  (d)  are  the  refined  parameter  estimate  meanilcr 
versus  true  parameter  plot  and  the  refined  parameter  estimate  versus  time  plot,  respectively.  The 
refined  parameter  estimate  versus  time  plot  in  Figure  34(d)  is,  again,  a  single  Monte  Carlo  run  at  a 
true  effectiveness  of  50%  (the  symbol  *  is  placed  at  the  declaration  time  in  subplot  (d)  for  clarity). 
The  jumping  is  significantly  reduced  in  the  refined  parameter  estimate  versus  time  plot  in  the  range 
from  2  seconds  to  5.5  seconds.  After  5.5  seconds,  the  refined  parameter  estimate  rises  near  the 
correct  effectiveness  value.  Thus,  the  “bouncing”  region  is  forced  to  zero  (and  the  failure  is  treated 
as  a  complete  rudder  failure)  until  the  refined  estimate  attains  the  correct  parameter  value.  This 
conservative  approach  uses  a  refined  parameter  estimate  of  zero  when  the  algorithm  produces  an 
indecisive  estimate  (seen  through  the  bouncing  behavior).  Thus,  the  control  scheme  will  treat  the 
failure  as  a  complete  failure  (and  use  unmodified  CR)  until  the  effectiveness  is  consistently  estimated 
as  a  partial  failure  (and  then  use  modified  CR).  Further,  true  effectiveness  values  in  the  region  0% 
to  35%  are  consistently  mapped  to  a  refined  estimate  0%,  or  a  complete  rudder  failure,  as  desired. 
(A  similar  approach  could  be  employed  to  improve  the  refined  estimate  of  a  left  stabilator  failure  in 
the  region  Oitrue  =  12%  —  20%,  as  shown  in  Figure  29(c).)  In  practice,  a  designer  could  choose  other 
^out  vs.  a  curves,  but  shown  here  is  one  good  set  of  such  curves  and  an  indication  of  performance 
sensitivity  to  alterations  in  the  mapping  definition. 

5. 7  Summary 

This  section  reviews  the  design  and  implementation  procedures  for  MMAE  with  Filter  Spawn¬ 
ing  as  well  as  modification  that  can  be  made  by  the  designer. 

5,7,1  Design 

The  following  procedure  is  accomplished  to  form  the  refined  parameter  estimate,  a-outi  fo 
used  for  Control  Redistribution  (CR)  for  flight  control  in  the  face  of  partial  or  complete  actuator 
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failures  and  full  sensor  failures,  based  on  failure  detection  and  estimation  based  on  MMAE  with 
Filter  Spawning: 

1.  Chose  a  discretization  set  or  sets  for  the  spawned  filters.  (Section  5.2) 

2.  Calculate  the  conditional  probabilities  for  each  filter  with  the  MMAE  at  each  time  sample  while 
varying  the  true  actuator  effectiveness  value.  (Section  5.3) 

3.  Using  the  conditional  probabilities  and  the  respective  hypothesized  parameter  values,  determine 
a  blended  parameter  estimate  at  each  time  sample.  (Section  5.4) 

4.  Using  the  time  to  convergence  as  seen  in  the  parameter  estimate  versus  time  plots,  time-average 
the  parameter  estimate  mean  value  to  obtain  one  steady  state  mean  estimate  for  each  true 
parameter  value.  (Section  5.5) 

5.  Refine  the  estimate  to  incorporate  the  relationship  between  the  true  parameter  value  and  the 
parameter  estimate.  Further,  incorporate  logic  into  the  formation  of  the  refined  estimate  to 
apply  unmodified  CR  or  modified  CR  appropriately,  depending  on  the  application.  (Section  5.6) 

5. 7. 2  Implementation 

The  following  procedure  is  accomplished  to  implement  the  refined  parameter  estimate,  e^outi  in 
MMAE  with  Filter  Spawning  at  each  time  sample: 

1.  Calculate  the  conditional  probabilities  for  each  filter.  (Section  5.3) 

2.  Using  the  conditional  probabilities  and  the  respective  hypothesized  parameter  values,  determine 
a  blended  parameter  estimate.  (Section  5.4) 

3.  Refine  the  estimate.  (Section  5.6) 

A.  If  detection  has  occurred  less  than  two  seconds  prior  to  the  current  time,  do  not  “trust” 
the  estimate  yet  and  conservatively  apply  CR  with  aout  =  0%- 
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B.  If  detection  has  occurred  more  than  two  seconds  prior  to  the  current  time,  “trust”  the 
estimate  and  apply  CR  or  modified  CR  to  obtain  the  least  degradation  in  performance  as 
is  possible. 

5. 7. 2.1  Design  Modification  Options.  Just  as  Section  4.4.5  oflFered  design  modification 
options  for  obtaining  an  estimate,  this  section  offers  such  modifications  for  obtaining  a  refined 
estimate.  (In  Section  4.4.5,  the  modifications  affect  the  computation  of  the  conditional  probabilities, 
failure  detection,  and  failure  estimation.  In  this  section,  the  modifications  ajffect  the  computation 
of  the  refined  estimate.)  The  designer  has  the  following  options  available  for  adjustment  to  enhance 
the  refined  estimate: 

1.  In  computing  the  blended  parameter  estimate  at  each  time  based  on  the  conditional  probabilities 
of  each  filter  and  its  corresponding  effectiveness  hypothesis,  an  additional  blending  lower  bound 
may  be  imposed.  For  this  research,  the  same  blending  lower  bound  used  for  the  state  estimate 
is  used  in  forming  the  parameter  estimate,  namely,  0.005.  (See  Section  2.4.1  for  the  discussion 
on  lower  bounds.) 

2.  Based  on  the  parameter  estimate  versus  time  plots,  the  designer  can  select  the  time  to  start 
and  end  the  time-average  used  in  the  parameter  estimate  versus  true  parameter  plots,  chosen  as 
tstart  =  4  sec.  and  t^nd  =  8  sec.  for  this  research.  (Section  5.4  illustrated  the  effect  of  changing 

t start') 

3.  Based  on  the  parameter  estimate  versus  true  parameter  plots,  the  designer  may  arrive  at 
mappings  used  to  refine  the  estimate  different  from  those  given  here.  For  the  rudder, 
Section  5. 6.2. 3  illustrated  significant  differences  in  the  refined  output  of  two  slightly  different 
mappings.  Thus,  the  most  flexibility  in  MMAE/CR  with  Filter  Spawning  is  the  map  chosen 
to  refine  the  estimate.  Quantization  could  be  employed  to  force  the  mapping  to  discrete  levels. 
Section  5.6.2  demonstrated  limited  quantization  for  the  flaperons  in  the  region  a  =39%  —  41% 
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as  shown  in  Figures  31(b)  and  32(b). 


4.  Based  on  the  parameter  estimate  versus  time  plots,  the  designer  can  select  the  time  at  which  the 
refined  estimate  is  given  to  CR,  chosen  as  two  seconds  after  a  failure  is  declared  for  this  research. 
More  complicated  techniques  could  be  employed,  such  as  windowing  (averaging  the  refined 
estimate  over  a  given  number  of  samples)  or  a  steady  state  test  (waiting  until  the  difference 
between  the  present  refined  estimate  and  the  refined  estimate  a  given  number  of  sample  periods 
earlier,  or  averaged  over  a  number  of  earlier  sample  periods,  is  within  a  specified  limit).  After 
initially  using  the  refined  estimate,  the  designer  must  decide  whether  or  not  to  use  the  refined 
estimate  as  computed  at  each  successive  sample  period  or  to  use  the  refined  estimate  for  a  given 
period  of  time  before  using  a  new  refined  estimate. 

The  options  presented  here  and  in  Section  4.4.5  can  be  explored  fully  when  a  control  analysis 
is  sought.  This  research  is  complete,  having  detected  complete  and  partial  actuator  failures  and 
obtained  an  accurate  estimate  of  the  true  effectiveness  for  partial  actuator  failures  through  the  use 
of  MMAE  with  Filter  Spawning.  While  Section  6.3.1  details  the  issue  of  applying  control  for  partial 
actuator  impairments,  it  is  mentioned  here  that,  since  Stepaniak  [41,42]  demonstrated  CR’s  ability 
to  restore  control  in  the  case  of  complete  failures,  modified  CR  should  be  able  to  restore  control  in 
the  case  of  partial  failures. 

5. 8  Conclusion 

In  this  chapter,  the  results  of  this  research  have  been  presented,  walking  the  reader  through  the 
process  in  forming  the  results.  Discretization  sets  for  the  spawned  filters  were  chosen  in  Section  5.2, 
“probability  plots”  were  described  and  shown  Section  5.3,  “parameter  estimate  versus  time  plots” 
were  described  in  Section  5.4,  “parameter  estimate  versus  true  parameter  plots”  were  described  in 
Section  5.5,  “refined  parameter  estimate  plots”  were  described  and  shown  in  Section  5.6,  and  a 
summary  of  the  design,  implementation,  and  modification  options  was  given  in  Section  5.7. 
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Chapter  6  -  Conclusions  and  Recommendations 


6.1  Chapter  Overview 

This  chapter  presents  a  review  of  this  research  in  Section  6.2.  MMAE  with  Filter  Spawning 
successfully  estimated  the  failure  effectiveness  in  the  face  of  partial  actuator  failures.  Moreover, 
useful  design  tools  were  developed,  allowing  the  designer  to  notice  trends  quickly,  improve  the 
parameter  estimate,  and  give  insight  to  how  the  estimate  should  be  used  in  control  redistribution. 
The  recommendations  for  future  research  are  given  in  Section  6.3,  including  the  final  step  of  the 
detection,  estimation  and  control  scheme  (controlling  the  aircraft  with  detected  and  estimated  partial 
failures);  algorithm  enhancement  recommendations  (improvements  within  the  current  capabilities  of 
the  MMAE  with  Filter  Spawning  algorithm);  and  algorithm  extension  recommendations  (increasing 
the  capabilities  of  the  MMAE  with  Filter  Spawning  algorithm). 

6.2  Performance  of  MMAE  with  Filter  Spawning 

6.2,1  Models  and  Assumptions 

For  this  research,  the  “real  world”  is  the  Variable  Stability,  In-flight  Simulation  Test  Aircraft 
(VISTA)  F-16.  The  “truth  model”  is  a  full  six-degree-of-freedom  model  including  nonlinear  equa¬ 
tions  of  motion,  fourth  order  actuator  models,  the  complete  Block  40  flight  control  system,  and  the 
aileron-to-rudder  interconnect.  A  reduced  order  “design  model”  is  chosen  as  a  linear,  time-invariant 
(LTI),  13  state  truth  model,  including  first-order  actuator  models.  The  “design  model”  is  linearized 
about  the  following  flight  condition:  steady  level  flight  at  0.4  Mach  at  20,000  feet. 

For  this  research,  design  models,  each  based  on  a  different  failure  hypothesis,  are  used  in  a 
Multiple  Model  Adaptive  Estimation  with  Filter  Spawning  algorithm.  Failures  are  introduced  into 
the  design  model  (and  truth  model)  using  the  effectiveness  factor, 

0<e<l  (6.1) 

where  e  =  0  is  a  “complete  failure”,  0  <  e  <  1  is  a  “partial  failure”,  and  e  =  1  is  a  “fully  functional 
device” .  An  actuator  failure  is  introduced  into  the  truth  model  by  multiplying  the  commanded 


actuator  position  by  e.  An  actuator  failure  is  introduced  into  the  LTI  design  model  by  multiplying 
the  column  of  the  input  matrix  that  corresponds  to  the  failed  actuator  by  e.  Only  complete  sensor 
failures  are  considered,  modeled  by  the  truth  model  and  design  model  as  the  loss  of  the  desired  noise- 
free  signal  portion  of  the  sensor  reading  while  still  admitting  sensor  noise  into  the  measurement.  In 
the  design  model,  it  appears  as  the  row  of  the  measurement  matrix  that  corresponds  to  the  failed 
sensor  being  multiplied  by  zero. 

6.2.2  MMAE  with  Filter  Spawning  Algorithm 

The  MMAE  with  Filter  Spawning  algorithm  uses  15  filters  at  any  one  time.  Twelve  of  the 
filters’  hypotheses  are  the  same  throughout  the  simulation,  as  given  in  Table  14,  The  remaining 
three  filters  are  “spawned”  based  on  the  current  actuator  with  the  highest  conditional  probability. 
The  hypothesis  of  each  spawned  filter  is  a  partial  failure  of  that  actuator  at  a  specified  effectiveness, 
where  each  of  the  three  spawned  filters  uses  a  different  specified  effectiveness.  Noticing  that  the  fully 
functional  aircraft  filter  and  complete  actuator  failure  filter  (for  each  individual  actuator  considered) 
are  also  associated  with  the  spawned  filter  hypotheses,  the  spawned  filters  resolve  the  estimate  of 
the  failure  effectiveness,  e{ti),  more  precisely  by  including  five  discretization  points  (rather  than 
just  two  if  spawned  filters  were  not  included)  used  in  the  blended  estimate,  expressed  in  terms  of 
effectiveness  percent  as 

Cj  =  0%,  €,i  =  40%,  e,<2  =  60%,  ejs  =  80%,  Cff  =  100%  (6.2) 

where  Sj  is  the  effectiveness  hypothesis  of  the  complete  actuator  failure  filter;  eji^ej2^  and  Cjs  are 
the  effectiveness  hypotheses  of  the  spawned  filters;  and  €//  is  the  effectiveness  hypothesis  of  the  fully 
functional  aircraft  filter  index.  The  effectiveness  hypotheses  for  the  spawned  filters  in  Equation  (6.2) 


Table  14.  Twelve  Primary  Filter  in  MMAE  Bank 


Fully  Functional  Aircraft 

Angle  of  Attack  Sensor  Failure 

Left  Stabilator  Failure 

Pitch  Rate  Sensor  Failure 

Right  Stabilator  Failure 

Normal  Acceleration  Sensor  Failure 

Left  Flaperon  Failure 

Roll  Rate  Sensor  Failure 

Right  Flaperon  Failure 

Yaw  Rate  Sensor  Failure 

Rudder 

Lateral  Acceleration  Sensor  Failure 
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are  based  on  the  empirical  relationship  between  the  parameter  estimate  and  the  true  estimate, 
comparing  several  sets  of  hypotheses  used  as  the  eflFectiveness  hypotheses  for  the  spawned  filters  in 
the  MMAE  bank  when  forming  the  parameter  estimate. 

6.2.3  Methodology  Developed 

A  systematic  method  has  been  developed  to  provide  a  refined  parameter  estimate,  First, 

the  mean  and  standard  deviation  of  the  parameter  estimate  at  each  time,  as  computed  by 

the  MMAE  with  Filter  Spawning  over  10  Monte  Carlo  runs,  is  plotted  versus  time  for  each  true 
effectiveness  value  from  0%  to  100%  in  1%  increments.  Next,  the  mean  and  standard  deviation  of 
the  parameter  estimate  are  time-averaged  (with  the  time-averaging  window  based  on  the  convergence 
characteristics  seen  in  the  mean  and  standard  deviation  of  the  parameter  estimate  versus  time  plots) 
to  obtain  one  parameter  estimate  [meamblcr]  for  each  true  effectiveness  value  from  0%  to  100%  in 
1%  increments.  Finally,  the  relationship  found  by  plotting  the  parameter  estimate  versus  the  true 
estimate  is  used  to  refine  the  estimate,  yielding  a  mapping  from  Bmmae  ^out  for  use  by  Control 
Redistribution  (CR). 

6.2.4  Partial  Failure  Detection  and  Estimation 

The  meamblcr  values  of  the  refined  parameter  estimate,  Bout^  versus  the  true  parameter,  Btrue^ 
for  each  actuator  failure  is  shown  in  Figures  35  through  39.  In  order  to  compare  one  B^ut  {U)  (as 
it  varies  over  time)  for  each  Btmei  the  plots  in  Figures  35  through  39  pertain  to  the  single  Bout  (ii) 
given  at  a  time  two  seconds  after  the  failure  was  declared.  This  time  selection  was  chosen  based  on 
plots  of  the  parameter  estimate  versus  time.  The  mean  and  standard  deviation  was  computed  for 
the  Bout  given  by  the  algorithm  two  seconds  after  the  failure  declaration  for  10  Monte  Carlo  runs. 
The  mean  is  shown  as  a  solid  line,  and  dbld  bounds  are  shown  as  a  “dash-dot”  lines  symmetrically 
displaced  about  the  mean. 

Notice  the  characteristics  of  the  refined  parameter  estimate  versus  the  true  parameter  plots 
shown  in  Figures  35  through  39.  The  refined  parameter  estimate  for  low  true  effectiveness  values  is 
a  complete  actuator  failure  estimate,  so  that  unmodified  CR  (for  complete  failures)  is  used  rather 
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than  modified  CR  (for  partial  failures).  Further,  the  refined  parameter  estimate  for  high  true 
effectiveness  values  is  a  fully  functional  aircraft  estimate;  that  is,  until  the  actuator  s  performance 
is  degraded  beyond  30%  (or  conversely,  an  effectiveness  of  less  than  70%  is  attained),  the  aircraft 
is  declared  to  be  fully  functional  and  the  natural  robustness  of  the  original  Block  40  flight  control 
system  is  employed  to  handle  such  benign  partial  failures.  The  exception  to  this  is  the  refined 
estimate  for  a  rudder  failure,  as  shown  in  Figure  (39),  where  a  rudder  failure  is  accurately  estimated 
for  the  slightest  degradation  (or  conversely,  for  high  effectiveness  values). 

6. 3  Recommendations 

The  performance  of  the  refined  estimates  for  each  actuator  failure  in  Figures  35  through  39 
demonstrates  in  a  compact  manner  the  ability  of  MMAE  with  Filter  Spawning  to  obtain  an  accurate 
estimate  of  complete  and  partial  actuator  failures,  as  applied  to  the  VISTA  F-16.  This  research  has 
concentrated  on  MMAE  with  Filter  Spawning’s  ability  to  detect  and  estimate  complete  and  partial 
actuator  failures  (as  well  as  complete  sensor  failures).  To  complete  the  application  of  MMAE/CR 
with  Filter  Spawning,  control  should  be  applied  using  the  refined  estimate  of  the  failure’s  effective¬ 
ness.  Also,  additional  recommendations  are  provided  as  enhancements  to  the  current  algorithm  and 
as  expansions  beyond  detection,  estimation,  and  control  as  considered  in  this  thesis. 

6.3.1  Modified  Control  Redistribution 

Stepaniak  [41,42]  showed  that,  given  the  correct  failure  declaration.  Control  Redistribution 
(CR)  restored  performance  of  an  aircraft  with  failed  actuators  to  nearly  that  of  a  fully  functional 
aircraft.  While  CR  has  not  been  demonstrated  in  the  case  of  partial  failures  (i.e. ,  modified  CR) ,  given 
an  accurate  estimate  of  the  partial  failure’s  effectiveness,  modified  CR  should  restore  performance 
of  the  aircraft  with  partially  failed  actuators  to  at  least  that  of  an  aircraft  with  completely  failed 
actuators  and  an  unmodified  CR  algorithm.  Given  an  accurate  estimate  of  the  partial  failure’s 
effectiveness,  the  partially  failed  actuator  can  be  used  to  help  control  the  aircraft;  therefore,  more 
control  is  available  in  the  partial  actuator  failure  case  than  is  available  in  the  complete  actuator 
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failure  case.  For  this  reason,  given  an  accurate  estimate  of  the  partial  failure’s  effectiveness,  modified 
CR  should  be  able  to  outperform  the  performance  of  GR  with  a  complete  actuator  failure. 

The  way  in  which  the  refined  parameter  estimate  is  used  by  the  modified  CR  algorithm  should 
be  explored  further.  The  designer  may  choose  to  start  using  the  refined  estimate  in  modified  CR 
after  a  given  number  of  time  samples  has  passed  beyond  the  declaration  of  a  failure.  (This  is 
the  suggested  method  based  on  this  research.  It  is  suggested,  based  upon  the  parameter  estimate 
versus  time  plots,  that  the  refined  estimate  is  used  in  modified  CR  two  seconds  after  a  failure  is 
declared.)  More  sophisticated  techniques  could  be  employed,  such  as  windowing  (averaging  the 
refined  estimate  over  a  given  number  of  samples)  or  a  steady  state  test  (waiting  until  the  difference 
between  the  present  refined  estimate  and  the  refined  estimate  a  given  number  of  sample  periods 
earlier,  or  averaged  over  a  number  of  prior  sample  periods,  is  within  a  specified  limit).  Further, 
the  decision  must  be  made  whether  or  not  to  use  the  refined  estimate  as  computed  at  each  sample 
period  or  to  continue  to  use  the  refined  estimate  for  a  given  period  of  time  before  using  a  new  refined 
estimate. 

6,3,2  Algorithm  Enhancements 

The  following  recommendations  are  enhancements  to  the  current  algorithm.  In  other  words, 
these  enhancements  do  not  expand  the  capabilities  of  MMAE  with  Filter  Spawning;  rather,  they 
should  be  used  to  improve  the  performance  of  the  current  algorithm. 

6, 3, 2,1  Additional  Filters,  This  research  used  3  spawned  filters.  This  choice  was  made 
recognizing  the  trade-off  between  performance  and  computational  loading.  More  filters  should  be 
considered  to  see  if  the  performance  gained  merits  the  additional  computational  loading.  It  is 
important  to  note  that  performance  is  expected  to  improve  with  additional  spawned  filters.  An 
analysis  with  more  filters  should  be  conducted  to  determine  to  what  extent  performance  is  improved. 
Performance  should  be  sufficiently  improved  in  comparison  to  the  additional  computational  load 
required. 
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6. 3. 2. 2  Multiple  Spawned  Filters^  Hypotheses.  This  research  used  a  single  spawned 
filter  hypothesis  set,  namely,  40%,  60%,  and  80%  for  all  actuators.  However,  each  actuator  need 
not  spawn  filters  with  equally  discretized  effectiveness  hypotheses.  For  example,  the  partial  rudder 
failure  estimation  is  improved  if  filters  are  spawned  with  hypotheses  25%,  50%,  and  75%.  For 
simplicity,  all  actuators  shared  the  same  spawned  filter  effectiveness  hypotheses.  Employing  different 
spawned  filter  effectiveness  hypotheses  may  prove  fruitful,  and  there  are  no  additional  memory 
requirements. 

€.3.2.3  Design  Modification  Options.  Throughout  this  thesis,  design  modification 
options  have  been  mentioned.  A  failure  is  declared  if  the  conditional  probability  of  an  elemental 
filter  exceeds  some  threshold.  For  this  thesis,  the  probability  threshold  for  declaring  a  failure  is 
set  to  0.9.  Increasing  this  threshold  may  result  in  more  undetected  failures,  while  decreasing  this 
threshold  may  cause  more  false  failure  declarations  when  no  failure  exists. 

When  forming  a  blended  parameter  estimate  using  conditional  probabilities  that  have  been 
artificially  bounded  above  zero,  a  second  blending  lower  bound  is  used  to  remove  hypotheses  with 
conditional  probabilities  at  or  near  the  lower  bound.  For  this  research,  the  blending  lower  bound 
used  to  form  the  effectiveness  estimate  is  0.005.  This  may  be  adjusted  as  needed. 

For  this  research,  the  spawned  filters  are  used  in  the  MMAE  bank  at  all  times.  The  conditional 
probabilities  are  recalculated  when  the  spawned  filters  are  not  really  needed,  as  in  the  case  of  a 
sensor  failure.  As  an  alternative,  logic  could  employ  using  a  bank  without  spawned  filters  when  the 
spawned  filters  are  not  needed. 

For  this  research,  filters  are  spawned  based  on  the  actuator  with  the  highest  conditional  proba¬ 
bility.  Deciding  when  and  how  to  spawn  filters  could  be  done  differently.  For  example,  the  designer 
may  choose  to  wait  until  the  conditional  probability  for  an  actuator  failure  hypothesis  exceeds  some 
limit  before  spawning  filters  based  upon  that  actuator. 

Based  on  the  parameter  estimate  versus  time  plots  discussed  in  Section  6.2.3,  the  designer  can 
select  the  time  to  start  and  end  the  time-average  used  in  the  parameter  estimate  versus  true  param- 
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eter  plots  in  order  to  determine  the  mapping  from  ^mmae  to  Siout  for  use  by  Control  Redistribution 
(CR).  While  the  start  time  was  chosen  as  4  seconds  and  the  end  time  was  chosen  as  8  seconds 
for  this  research,  a  designer  may  wish  to  explore  the  results  obtained  using  different  time-averaging 
windows. 

Based  on  the  parameter  estimate  versus  true  parameter  plots  discussed  in  Section  6.2.3,  map¬ 
pings  are  used  to  refine  the  estimate  for  use  by  Control  Redistribution  (CR).  This  is  the  most 
powerful  design  modification  option.  The  results  in  Figures  35  through  39  are  based  on  one  partic¬ 
ular  mapping  to  refine  the  estimate  for  each  actuator  failure.  Another  mapping  selection  may  yield 
vastly  different  refined  estimates. 

6. 3. 2. 4  Software  Implementation.  The  current  MMAE  with  Filter  Spawning  algorithm, 
including  the  truth  model  used  to  validate  the  design,  is  implemented  using  source  code  written  in 
FORTRAN  77.  The  compiler  uses  libraries  built  into  the  SunOS  4.1  operating  system,  and  the 
software  cannot  link  under  another  operating  system.  As  a  result,  the  current  source  code  for  this 
research  must  be  linked  on  the  SunOS  4.1  operating  system  only.  Further,  Sun  (Stanford  University 
Networking)  no  longer  supports  SunOS  4.1.  It  is  suggested  that  the  dependency  of  this  algorithm’s 
implementation  upon  the  SunOS  4.1  operating  system  be  removed  as  soon  as  possible.  (For  the 
sake  of  posterity,  notice  this  is  thesis  is  written  1999,  when  a  fear  of  the  year  2000,  or  Y2K,  exists 
for  operating  systems  no  longer  supported  by  the  authors.) 

Once  moved  to  a  new  operating  system,  the  algorithm  must  be  thoroughly  verified.  That  is, 
the  truth  model  must  be  validated  and  all  prior  research  efforts’  results  must  be  replicated.  For 
this  reason,  the  transition  has  been  avoided  to  this  date.  The  following  cliche  has  motivated  the 
delay  in  this  transition:  'If  it  isn't  hroke^  don't  fix  it " 

6.3.3  Algorithm  Expansions 

The  following  recommendations  are  expansions  to  the  current  algorithm.  In  other  words, 
these  enhancements  allow  MMAE  with  Filter  Spawning  to  address  situations  not  possible  with  the 
MMAE  with  Filter  Spawning  algorithm  used  in  this  research.  These  expansions  will  complete  the 
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capabilities  needed  for  a  flight-worthy  algorithm.  With  the  results  demonstrated  in  this  thesis,  the 
pursuit  of  a  flight-worthy  algorithm  is,  in  fact,  justified. 

6. 3. 3.1  Flight  Envelope  Expansion.  The  current  algorithm  uses  elemental  filter  design 
models  linearized  about  the  flight  condition  of  0.4  Mach  at  20,000  feet.  Thus,  as  the  aircraft 
deviates  from  this  flight  condition,  the  filters’  design  models  do  not  match  the  truth  model  (or  the 
“real  world”).  The  simulation  considered  in  this  thesis  has  been  steady  level  flight  for  a  duration 
of  only  eight  seconds,  so  that  the  aircraft  would  not  change  flight  conditions  considerably.  Strong 
maneuvers  (through  pilot  commands)  and  long  time  durations  could  not  be  considered. 

Gain  scheduling  could  be  used  in  the  design  models  to  adapt  to  the  changing  flight  condition. 
The  VISTA  F-16  Block  40  flight  control  system  uses  gain  scheduling  based  on  flight  condition,  so  the 
necessary  information  is  readily  available.  Further,  the  redistribution  matrix  is  also  a  function  of 
the  flight  condition;  thus,  the  redistribution  matrix  must  be  either  computed  on-line  or  computed 
a-priori  and  stored  in  memory  for  regions  of  the  flight  envelope. 

6. 3. 3. 2  Dual  Failures.  The  possibility  exists  for  more  than  one  failure  to  occur  during 
flight.  When  the  flight  envelope  is  expanded  and  the  simulation  can  run  for  longer  periods  of  time, 
the  possibility  for  dual  failures  should  be  considered.  Lewis  [18]  has  demonstrated  the  ability  of 
MMAE  to  detect  dual,  complete  failures.  Dual  failures  should  also  be  considered  in  which  either 
failure  may  be  a  partially  failed  actuator.  With  an  accurate  refined  parameter  estimate  for  a  partial 
actuator  failure,  a  second  failure  declaration  can  be  sought  by  employing  the  hierarchical  structure 
developed  by  Stevens  [28,43]  and  implemented  by  Lewis  for  complete,  dual  failures.  Clark  [8] 
demonstrated  that  an  accurate  effectiveness  estimate  of  the  first  partial  actuator  failure  is  essential 
before  a  second  failure  can  be  sought  using  the  hierarchical  structure. 

Lewis  [18]  did  find  that  a  second  failure  was  more  difficult  to  detect  when  the  first  failure  was 
an  actuator,  because  redistributing  dither  through  CR  caused  the  magnitude  of  the  dither  to  be 
reduced  in  some  channels  (due  to  destructive  interference).  In  the  case  of  a  first  partial  actuator, 
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however,  redistributing  dither  through  modified  CR  should  provide  better  excitation  than  that  of 
unmodified  CR  because  some  control  authority  is  maintained  by  the  partially  failed  actuator. 

6, 3. 3, 3  Other  Failure  Types.  For  this  research,  actuator  failures  other  than  “failure  to 
free  stream”  should  be  considered.  The  actuator  failure  models  (on  which  the  elemental  filters 
in  the  MMAE  are  based)  hypothesize  actuator  failures  as  a  “failure  to  free  stream” .  The  failure 
is  introduced  into  the  truth  model  in  the  same  fashion.  The  performance  of  the  MMAE  with 
Filter  Spawning  should  be  explored  when  the  failure  is  introduced  into  the  truth  model  in  a  fashion 
different  from  that  hypothesized  by  the  failure  models  used  in  forming  the  elemental  filters.  In 
particular,  stuck  actuators  or  a  deterioration  in  the  actuator’s  time  response  should  be  introduced 
into  the  truth  model.  A  complete  failure  mode  analysis  would  indicate  the  most  crucial  forms  of 
failure  to  consider.  While  data  indicating  which  type  of  failure  (i.e.,  failure  to  free  stream,  a  stuck 
actuator,  or  a  deterioration  in  the  actuator’s  time  response)  is  most  likely  to  occur  in  the  real  world 
may  avoid  the  necessity  of  such  an  analysis,  it  serves  as  a  measure  of  the  algorithm’s  “robustness” 
to  the  failure  type.  This  effort  might  also  result  in  additional  elemental  filters  within  the  MMAE 
structure,  based  upon  new  models  of  important  failure  types  that  warrant  inclusion  in  order  to 
provide  good  detection  and  estimation. 

6.4  Chapter  Summary 

This  chapter  has  reviewed  the  results  of  using  MMAE  with  Filter  Spawning  to  obtain  an 
estimate  of  the  effectiveness  in  the  face  of  partial  actuator  failures.  The  review  has  included  the 
models  used  to  implement  MMAE  with  Filter  Spawning,  the  method  developed  to  refine  the  estimate, 
and  the  refined  parameter  estimate  [meamhlcr]  performance  versus  the  true  parameter  plots  for 
each  actuator  failure.  Further,  recommendations  have  been  given  to  enhance  the  capabilities  of  the 
current  algorithm  as  well  as  extend  the  capabilities  of  the  algorithm. 
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APPENDIX  A  -  VISTA  F-16  Characteristics 


This  appendix  details  the  plant  characteristics  of  the  VISTA  F-16.  The  model  is  detailed  in 
Section  3,4.1.  The  stability  derivatives  for  the  plant  matrix,  A,  the  input  matrix,  B,  and  the  noise 
injection  matrix,  G,  are  found  by  linearizing  about  steady,  level  flight  at  0.4  Mach  at  20,000  feet. 
The  matrices  are  repeated  here.  The  values  of  the  longitudinal  and  lateral  stability  derivatives  for 
this  design  condition  are  given  in  Tables  15  and  16,  respectively. 
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With  the  plant  matrix  known,  the  open-loop  poles  can  be  found  as  the  roots  that  satisfy  the 
characteristic  equation, 


det  (5I  —  A)  =  0 


(6.6) 


The  poles  for  the  plant  at  this  design  condition  is  given  in  Table  17.  Notice  that  the  longitudinal 
pole,  p3,  is  unstable.  This  makes  the  control  of  this  aircraft  particularly  interesting;  without  a 
controller  in  the  loop,  the  system  will  diverge. 
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Table  15.  Longitudinal  Stability  Derivatives 


= -3.1677- 10^  ft/sec^ 

=  -1.4158  ■  10-''  1/sec 

Ml)  =  6.4212  - 10-^  1/sec 

xl  =  2.4312  •  10-^  l^ec 

mI  =  -1.3465  - 10-“  1/ft-sec 

=  1.6353  •  10^  ft/sec"'^ 

= -4.4041 -10-^  1/sec 

Ml,  =  1.5251  - 10“  1/sec^ 

=-9.9720-10-1 

= -5.2692- 10-1 

4.  =-6.8439-10-^  17^ 

m],  =  -3.6448  -  lO^i  1/sec^ 

=  -3.3787-10-^  1/sec 

M;*  =  2.8568  - 10-^  1/sec^ 

Table  16.  Lateral  Stability  Derivatives 


r?  =  7.7599- 10-1  i/sec 

=  1.8245  - 10-1 

L’g  =  -1.8528  - 101  i/sec"' 

=  2.8330  -  lO**  1/sec^ 

lI  =  -1.5559  - 10”  1/sec 

nI  =  -4.3291  - 10-^  l/sec 

y;  =  -9.9763  - 10-1 

ll  =  4.1348  - 10-1  l/sec 

=  1.3771  -  lO--*  1/sec 

y/*=  5.6951  - 10-^  1/sec 

L'f  =  -1.2407  - 101  1 /gepii 

yI  =  1.6959  - 10-^  1/sec 

=  2.8629  ■  10''  1/sec^ 

Ni  =-1.1652-10''  1/sec^ 

Table  17.  Open-Loop  Eigenvalues 


Longitudinal 

Lateral 

Pi  2  =  -0.0268  ±  j0.1376 

Pi  2  =  -0.3365  ±  j2.4071 

P3  =  -fO.8341 

P3  —  —0.0444 

P4  =  -1.7455 

P4  =  -1.2305 
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APPENDIX  B  -  Probability  Plots 

This  appendix  contains  the  probability  plots  for  the  right  stabilator,  left  flaperon,  right  flaperon, 
and  the  rudder.  Recall  that  the  left  stabilator  probability  plots  were  provided  in  Section  5.3.  The 


effectiveness  is  varied  according  to  Table  11,  repeated  here  as 


(a)  1  Discretization  Set:  10%,  25%,  50% 

Set 

(b)  1  Discretization  Set:  20%,  40%,  60% 

Set  #2 

(c)  1  Discretization  Set:  25%,  50%,  75% 

Set  #3 

(d)  1  Discretization  Set:  40%,  60%,  80% 

Set  #4 

B.  1  Right  Stabilator 

The  corresponding  figures  for  each  effectiveness  value  of  the  right  stabilator  failure  are  given  as 
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(c)  Discretization  Set:  25%, 50%, 75%  (d)  Discretization  Set:  40%, 60%, 80% 

Figure  40.  Probability  Plot:  Right  Stabilator  Failure,  e  =  0% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 


Figure  43.  Probability  Plot:  Right  Stabilator  Failure,  e  =  30% 
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Figure  45.  Probability  Plot:  Right  Stabilator  Failure,  e  ==  50% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  46.  Probability  Plot:  Right  Stabilator  Failure,  e  =  60% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 


Figure  47.  Probability  Plot:  Right  Stabilator  Failure,  e  =  70% 
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(a)  Discretization  Set:  10%,  25%,  50%  (b)  Discretization  Set:  20%,  40%,  60% 


Time  (sec)  Time  (sec) 

(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  48.  Probability  Plot:  Right  Stabilator  Failure,  e  =  80% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  49.  Probability  Plot:  Right  Stabilator  Failure,  e  =  90% 
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Figure  50.  Probability  Plot:  Right  Stabilator  Failure,  e  =  100% 


B.2  Left  Flaperon 


The  corresponding  figures  for  each  effectiveness  value  of  the  left  flaperon  failure  are  given  as 


Figure 

Left  Flaperon 
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Figure  51.  Probability  Plot:  Left  Flaperon  Failure,  e  =  0% 


Time  (sec)  Time  (sec) 

(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  52.  Probability  Plot:  Left  Flaperon  Failure,  e  10% 
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(a)  Discretization  Set:  10%,  25%,  50%  (b)  Discretization  Set:  20%,  40%,  60% 


Time  (sec) 


Time  (sec) 


(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  53.  Probability  Plot:  Left  Flaperon  Failure,  e  =  20% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 


Figure  54.  Probability  Plot:  Left  Flaperon  Failure,  e  —  30% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  55.  Probability  Plot:  Left  Flaperon  Failure,  e  =  40% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  56.  Probability  Plot:  Left  Flaperon  Failure,  e  =  50% 
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(a)  Discretization  Set:  10%,  25%,  50%  (b)  Discretization  Set:  20%,  40%,  60% 


Figure  57.  Probability  Plot:  Left  Flaperon  Failure,  e  =  60% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 


Figure  58.  Probability  Plot:  Left  Flaperon  Failure,  e  =  70% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  60.  Probability  Plot:  Left  Flaperon  Failure,  e  =  90% 
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B.3  Right  Flaperon 


The  corresponding  figures  for  each  effectiveness  value  of  the  right  flaperon  failure  are  given  as 


Figure 

Right  Flaperon 
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(a)  Discretization  Set:  10%,  25%,  50%  (b)  Discretization  Set:  20%,  40%,  60% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 


Figure  62.  Probability  Plot:  Right  Flaperon  Failure,  e  =  0% 


(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 


Figure  63.  Probability  Plot:  Right  Flaperon  Failure,  e  10% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  64.  Probability  Plot:  Right  Flaperon  Failure,  e  =  20% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 


Figure  65.  Probability  Plot:  Right  Flaperon  Failure,  e  =  30% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 


Figure  66.  Probability  Plot:  Right  Flaperon  Failure,  e  =  40% 
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Figure  67.  Probability  Plot:  Right  Flaperon  Failure,  e  =  50% 
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Figure  68.  Probability  Plot:  Right  Flaperon  Failure,  e  =  60% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  69.  Probability  Plot:  Right  Flaperon  Failure,  e  =  70% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 


Figure  72.  Probability  Plot:  Right  Flaperon  Failure,  e  =  100% 


B.4  Rudder 


The  corresponding  figures  for  each  effectiveness  value  of  the  rudder  failure  are  given  as 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 


Figure  74.  Probability  Plot:  Rudder  Failure,  e  =  10% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 

Figure  75.  Probability  Plot;  Rudder  Failure,  e  =  20% 
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(a)  Discretization  Set;  10%,  25%,  50%  (b)  Discretization  Set;  20%,  40%,  60% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 


Figure  77.  Probability  Plot:  Rudder  Failure,  e  =  40% 


(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 


Figure  78.  Probability  Plot:  Rudder  Failure,  e  =  50% 
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(a)  Discretization  Set:  10%,  25%,  50%  (b)  Discretization  Set:  20%,  40%,  60% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 


Figure  79.  Probability  Plot:  Rudder  Failure,  e  =  60% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 


Figure  80.  Probability  Plot:  Rudder  Failure,  e  ~  70% 
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(a)  Discretization.  Set:  10%,  25%,  50%  (b)  Discretization  Set:  20%,  40%,  60% 
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(c)  Discretization  Set:  25%,  50%,  75%  (d)  Discretization  Set:  40%,  60%,  80% 


Figure  81.  Probability  Plot:  Rudder  Failure,  e  =  80% 


Figure  82.  Probability  Plot:  Rudder  Failure,  e  =  90% 
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APPENDIX  C  -  Parameter  Estimate  Versus  Time  Plots 


This  appendix  includes  the  parameter  estimate  versus  time  for  the  right  stabilator,  left  flaperon, 
right  flaperon,  and  the  rudder.  The  parameter  estimate  versus  time  for  the  left  stabilator  was  shown 
in  Section  5.4. 

C.l  Right  Stabilator 

The  figure  numbers  and  page  numbers  for  the  parameter  estimate  versus  time  plots  for  the 
right  stabilator  failure  are 
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Figure  84.  a  Versus  Time  Plots  for  Right  Stabilator  Failure  Using  Spawned  Filters  10%,  25%,  50%. 
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Figure  86.  a  Versus  Time  Plots  for  Right  Stabilator  Failure  Using  Spawned  Filters  25%,  50%,  75%. 
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C.2  Left  Flaperon 

The  figure  numbers  and  page  numbers  for  the  parameter  estimate  versus  time  plots  for  the 
right  stabilator  failure  are 
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C.3  Right  Flaperon 


The  figure  numbers  and  page  numbers  for  the  parameter  estimate  versus  time  plots  for  the 
right  stabilator  failure  are 
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C.4.  Rudder 

The  figure  numbers  and  page  numbers  for  the  parameter  estimate  versus  time  plots  for  the 
right  stabilator  failure  are 
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Figure  97.  a  Versus  Time  Plots  for  Rudder  Failure  Using  Spawned  Filters  20%,  40%,  60%. 
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